Lucene search

K
ibmIBM18E418D17A93769619BB9FC275CE3EA1109F09510FB5A906E81A162F9C8CD7D0
HistoryJun 12, 2020 - 5:40 p.m.

Security Bulletin: IBM MQ could allow an authenticated user to cause a denial of service due to a memory leak. (CVE-2020-4267)

2020-06-1217:40:15
www.ibm.com
8

EPSS

0.001

Percentile

32.8%

Summary

A memory leak was found within the LDAP Authentication code which could be exploited to cause a denial of service attack.

Vulnerability Details

CVEID:CVE-2020-4267
**DESCRIPTION:**IBM MQ and MQ Appliance could allow an authenticated user to cause a denial of service due to a memory leak.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/175840 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM MQ 9.1 LTS
IBM MQ 9.0 LTS
IBM MQ 8.0
IBM MQ 9.1 CD

Remediation/Fixes

IBM MQ v8

Apply FixPack 8.0.0.15

IBM MQ V9.0 LTS

Apply FixPack 9.0.0.9

IBM MQ V9.1 LTS
Apply FixPack 9.1.0.5

IBM MQ V9.1 CD
Upgrade to version 9.1.5

Workarounds and Mitigations

None

EPSS

0.001

Percentile

32.8%

Related for 18E418D17A93769619BB9FC275CE3EA1109F09510FB5A906E81A162F9C8CD7D0