Lucene search

IbmCVE-2024-40680

HistorySep 07, 2024 - 2:15 p.m.

CVE-2024-40680

2024-09-0714:15:02

CWE-770

CWE-789

ibm

web.nvd.nist.gov

ibm mq operator

local user

denial of service

memory allocation

segmentation fault

vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

9.5%

JSON

IBM MQ Operator 2.0.26 and 3.2.4 could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.

Affected configurations

Nvd

Vulners

Node

ibmmq_operatorMatch2.0.26-

ibmmq_operatorMatch3.2.4-

VendorProductVersionCPE
ibmmq_operator2.0.26cpe:2.3:a:ibm:mq_operator:2.0.26:*:*:*:-:*:*:*
ibmmq_operator3.2.4cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*

Vendor	Product	Version	CPE
ibm	mq_operator	2.0.26	cpe:2.3:a:ibm:mq_operator:2.0.26::::-:::
ibm	mq_operator	3.2.4	cpe:2.3:a:ibm:mq_operator:3.2.4::::-:::

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:mq_operator:2.0.6:*:*:*:-:*:*:*",
      "cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "MQ Operator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.26, 3.2.4"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/297611

www.ibm.com/support/pages/node/7167732

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-40680