Description
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ | 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | — |
| IBM | MQ Appliance | 9.3 LTS, 9.3 CD, 9.4 LTS | — |
| IBM | MQ for HPE NonStop | 8.1.0 – ≤ 8.1.0.25 | — |
Advisories 1
- WID-SEC-2024-3732 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 30, 2025
References
- https://www.ibm.com/support/pages/node/7179137 vendor-advisory
- https://www.ibm.com/support/pages/node/7178085 vendor-advisory
- https://www.ibm.com/support/pages/node/7177593 vendor-advisory