PT-2020-18034 · Ibm · Ibm Mq+2

Published 2020-07-28 · Updated 2021-07-21 · CVE-2020-4375

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 8.0 through 9.1 LTS IBM MQ Appliance versions 8.0 through 9.1 LTS IBM MQ for HPE NonStop versions 8.0 through 9.1 LTS

Description The issue is caused by a memory leak resulting from an error when creating a dynamic queue, which could allow an attacker to cause a denial of service.

Recommendations For IBM MQ versions 8.0 through 9.1 LTS, update to a version that includes the fix for the memory leak issue. For IBM MQ Appliance versions 8.0 through 9.1 LTS, update to a version that includes the fix for the memory leak issue. For IBM MQ for HPE NonStop versions 8.0 through 9.1 LTS, update to a version that includes the fix for the memory leak issue.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2020-4375

Affected Products

Ibm Mq

Ibm Mq Appliance

Ibm Mq For Hpe Nonstop

References · 4

• https://osv.dev/vulnerability/CVE-2020-4375 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4375 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/179080 · Vendor Advisory
• https://ibm.com/support/pages/node/6252785 · Vendor Advisory