CVE-2024-51470

IBM MQ denial of service

State: Published
Severity: 6.5 Medium
Published: Dec 18, 2024
Updated: Dec 18, 2024
Reserved: Oct 28, 2024

Description

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	ibm

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
MQIBM	9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CDAffected
MQ ApplianceIBM	9.3 LTS, 9.3 CD, 9.4 LTSAffected
MQ for HPE NonStopIBM	8.1.0 through 8.1.0.25Affected

References

https://www.ibm.com/support/pages/node/7179137vendor-advisory
https://www.ibm.com/support/pages/node/7178085vendor-advisory
https://www.ibm.com/support/pages/node/7177593vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.