CVE-2024-40680

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.
References
Link Resource
https://www.ibm.com/support/pages/node/7167732 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:mq_operator:2.0.26:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*

History

31 Oct 2024, 17:15

Type Values Removed Values Added
Summary IBM MQ Operator 2.0.26 and 3.2.4 could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault. IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.
References
  • {'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/297611', 'name': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/297611', 'tags': ['VDB Entry', 'Vendor Advisory'], 'refsource': ''}

13 Sep 2024, 20:55

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7167732 - () https://www.ibm.com/support/pages/node/7167732 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/297611 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/297611 - VDB Entry, Vendor Advisory
CWE CWE-789 CWE-770
First Time Ibm
Ibm mq Operator
CPE cpe:2.3:a:ibm:mq_operator:2.0.26:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5

07 Sep 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-07 14:15

Updated : 2024-10-31 17:15


NVD link : CVE-2024-40680

Mitre link : CVE-2024-40680


JSON object : View

Products Affected

ibm

  • mq_operator
CWE
CWE-770

Allocation of Resources Without Limits or Throttling