PT-2024-28657 · Ibm · Ibm Mq Container Developer Edition+1

Published 2024-07-08 · Updated 2024-08-07 · CVE-2024-39743

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ Operator versions 2.0.24 through 3.2.2 IBM MQ Container Developer Edition (affected versions not specified)

Description The issue is caused by incorrect memory de-allocation, leading to a denial of service. A remote attacker could exploit this to cause the server to consume memory resources. The vulnerability is related to a partial string comparison issue under certain configurations.

Recommendations For IBM MQ Operator versions 2.0.24 through 3.2.2, update to a version that includes the fix for the denial of service issue. For IBM MQ Container Developer Edition, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-405

Related Identifiers

CVE-2024-39743

Affected Products

Ibm Mq Container Developer Edition

Ibm Mq Operator

References · 8

• https://osv.dev/vulnerability/CVE-2024-39743 · Vendor Advisory
• https://ibm.com/support/pages/node/7159714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39743 · Security Note
• https://t.me/cvedetector/181 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/297172 · Note
• https://twitter.com/CVEnew/status/1810307180287213904 · Twitter Post
• https://t.me/cvenotify/86016 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1810353458546913405 · Twitter Post