Vulnerabilities > CVE-2019-4614 - Unspecified vulnerability in IBM MQ and MQ Appliance

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

ibm

NVD

Published: 2020-01-28

Updated: 2021-07-21

Summary

IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM MQ 8.0.0.0 IBM MQ 8.0.0.1 IBM MQ 8.0.0.2 IBM MQ 8.0.0.3 IBM MQ 8.0.0.4 IBM MQ 8.0.0.5 IBM MQ 8.0.0.6 IBM MQ 8.0.0.7 IBM MQ 8.0.0.8 IBM MQ 8.0.0.9 IBM MQ 8.0.0.10 IBM MQ 8.0.0.11 IBM MQ 8.0.0.12 IBM MQ 8.0.0.13 IBM MQ 9.0.0.0 IBM MQ 9.0.0.1 IBM MQ 9.0.0.2 IBM MQ 9.0.0.3 IBM MQ 9.0.0.4 IBM MQ 9.0.0.5 IBM MQ 9.0.0.6 IBM MQ 9.0.0.7 IBM MQ 9.1.0 IBM MQ 9.1.1 IBM MQ 9.1.2 IBM MQ 9.1.3 IBM MQ 9.1.0.0 IBM MQ 9.1.0.1 IBM MQ 9.1.0.2 IBM MQ 9.1.0.3 IBM MQ Appliance 8.0.0.0 IBM MQ Appliance 8.0.0.1 IBM MQ Appliance 8.0.0.2 IBM MQ Appliance 8.0.0.3 IBM MQ Appliance 8.0.0.4 IBM MQ Appliance 8.0.0.5 IBM MQ Appliance 8.0.0.6 IBM MQ Appliance 8.0.0.7 IBM MQ Appliance 8.0.0.8 IBM MQ Appliance 8.0.0.9 IBM MQ Appliance 8.0.0.10 IBM MQ Appliance 8.0.0.11 IBM MQ Appliance 8.0.0.12 IBM MQ Appliance 8.0.0.13 IBM MQ Appliance 9.1.0.0 IBM MQ Appliance 9.1.0.1 IBM MQ Appliance 9.1.0.2 IBM MQ Appliance 9.1.0.3 IBM MQ Appliance 9.1.0.4 IBM MQ Appliance 9.1.1 IBM MQ Appliance 9.1.2 IBM MQ Appliance 9.1.3	61
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1
OS	Oracle Oracle Solaris -	1

Summary

Vulnerable Configurations

References