Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46934
HistoryMay 15, 2024 - 9:41 a.m.

Heap-based Buffer Overflow

2024-05-1509:41:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
ibm mq
buffer overflow
vulnerability
bounds checking
remote attacker
arbitrary code
server crash
security issue

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a Heap-based Buffer Overflow. The vulnerability is due to improper bounds checking, allowing a remote authenticated attacker to overflow a buffer and execute arbitrary code on the system or cause the server to crash.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

Related for VERACODE:46934