Denial of Service Vulnerability in IBM MQ by IBM

CVE-2025-36128

What is CVE-2025-36128?

IBM MQ versions 9.1, 9.2, 9.3 LTS, 9.4 LTS, and the Cloud Deploy versions 9.3 and 9.4 are susceptible to a denial of service attack due to insufficient enforcement of timeouts on individual read operations. This weakness can be exploited by an attacker employing slowloris-type techniques, potentially leading to service disruption and making the system unresponsive. It is essential for users of affected versions to apply available patches to mitigate these risks.

References