Buffer Overflow Vulnerability in IBM MQ Operator Products
CVE-2025-27365

6.5MEDIUM

Key Information:

Vendor
IBM
Status
MQ Operator
Vendor
CVE Published:
1 May 2025

Summary

A buffer overflow vulnerability exists in IBM MQ Operator products that can lead to a SIGSEGV error in the AMQRMPPA channel process. This issue arises when a client connects to an MQ Queue Manager, causing the process to terminate unexpectedly. It is crucial to apply security patches and updates to mitigate potential exploitation of this vulnerability.

Affected Version(s)

MQ Operator 2.0.0 LTS <= 2.0.29 LTS

MQ Operator 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CD

MQ Operator 3.2.0 SC2 <= 3.2.10 SC2

References

https://www.ibm.com/support/pages/node/7232272
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.