IBM MQ Appliance Vulnerable to Heap-Based Buffer Overflow
CVE-2024-25048

7.5HIGH

Key Information:

Vendor

IBM
Status
MQ Appliance
Vendor
CVE Published:
27 April 2024

What is CVE-2024-25048?

The IBM MQ Appliance version 9.3 CD and LTS is susceptible to a heap-based buffer overflow due to inadequate bounds checking mechanisms. This vulnerability can be exploited by a remote authenticated attacker, allowing them to overflow a buffer, which could lead to the execution of arbitrary code on the affected system or may result in the server crashing. Mitigating this risk is crucial to maintaining system integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MQ Appliance 9.3 LTS, 9.3 CD

References

https://www.ibm.com/support/pages/node/7149481
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/283137
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.