IBM MQ Operator Denial of Service Vulnerability

CVE-2024-39743

Summary

IBM MQ Operator versions 3.2.2 and 2.0.24, as well as IBM MQ Container Developer Edition, exhibit a vulnerability that can be exploited by a remote attacker to initiate a denial of service attack. This flaw is due to improper memory de-allocation, which allows an attacker to induce excessive memory consumption on affected servers. Organizations utilizing these versions should review the advisory for mitigation strategies to protect their systems against potential exploitation.

References