Vulnerabilities > CVE-2020-4267 - Memory Leak vulnerability in IBM MQ and MQ Appliance

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

ibm

CWE-401

NVD

Published: 2020-04-24

Updated: 2021-07-21

Summary

IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM MQ 9.1.0.0 IBM MQ 9.1.0.1 IBM MQ 9.1.0.2 IBM MQ 9.1.0.3 IBM MQ 8.0.0.0 IBM MQ 8.0.0.1 IBM MQ 8.0.0.2 IBM MQ 8.0.0.3 IBM MQ 8.0.0.4 IBM MQ 8.0.0.5 IBM MQ 8.0.0.6 IBM MQ 8.0.0.7 IBM MQ 8.0.0.8 IBM MQ 8.0.0.9 IBM MQ 8.0.0.10 IBM MQ 8.0.0.11 IBM MQ 8.0.0.12 IBM MQ 8.0.0.13 IBM MQ Appliance 9.1.0.0 IBM MQ Appliance 9.1.0.1 IBM MQ Appliance 9.1.0.2 IBM MQ Appliance 9.1.0.3 IBM MQ Appliance 9.1.0.4 IBM MQ Appliance 9.1.1 IBM MQ Appliance 9.1.2 IBM MQ Appliance 9.1.3 IBM MQ Appliance 9.1.4	27

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References