Vulnerabilities > CVE-2024-39743 - Unspecified vulnerability in IBM MQ Operator

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

ibm

NVD

Published: 2024-07-08

Updated: 2024-08-07

Summary

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM MQ Operator 3.1.0 IBM MQ Operator 3.1.1 IBM MQ Operator 3.1.2 IBM MQ Operator 3.1.3 IBM MQ Operator 2.4.0 IBM MQ Operator 2.4.1 IBM MQ Operator 2.4.2 IBM MQ Operator 2.4.3 IBM MQ Operator 2.4.4 IBM MQ Operator 2.4.5 IBM MQ Operator 2.4.6 IBM MQ Operator 2.4.7 IBM MQ Operator 2.4.8 IBM MQ Operator 2.3.0 IBM MQ Operator 2.3.1 IBM MQ Operator 2.3.2 IBM MQ Operator 2.3.3 IBM MQ Operator 2.2.0 IBM MQ Operator 2.2.1 IBM MQ Operator 2.2.2 IBM MQ Operator 2.0.0 IBM MQ Operator 2.0.1 IBM MQ Operator 2.0.2 IBM MQ Operator 2.0.3 IBM MQ Operator 2.0.4 IBM MQ Operator 2.0.5 IBM MQ Operator 2.0.6 IBM MQ Operator 2.0.7 IBM MQ Operator 2.0.8 IBM MQ Operator 2.0.9 IBM MQ Operator 2.0.10 IBM MQ Operator 2.0.11 IBM MQ Operator 2.0.12 IBM MQ Operator 2.0.13 IBM MQ Operator 2.0.14 IBM MQ Operator 2.0.15 IBM MQ Operator 2.0.16 IBM MQ Operator 2.0.17 IBM MQ Operator 2.0.18 IBM MQ Operator 2.0.19 IBM MQ Operator 2.0.20 IBM MQ Operator 2.0.21 IBM MQ Operator 2.0.22 IBM MQ Operator 2.0.23 IBM MQ Operator 3.0.0 IBM MQ Operator 3.0.1 IBM MQ Operator 3.2.0 IBM MQ Operator 3.2.1	48

Summary

Vulnerable Configurations

References