CVE-2024-40680

2024-09-0714:15:02

CWE-789

CWE-770

[email protected]

web.nvd.nist.gov

ibm mq operator

denial of service

segmentation fault

memory allocation

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.5%

JSON

IBM MQ Operator 2.0.26 and 3.2.4 could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.

Affected configurations

Nvd

Node

ibmmq_operatorMatch2.0.26-

ibmmq_operatorMatch3.2.4-

VendorProductVersionCPE
ibmmq_operator2.0.26cpe:2.3:a:ibm:mq_operator:2.0.26:*:*:*:-:*:*:*
ibmmq_operator3.2.4cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*