{"id":"CVE-2023-28513","state":"PUBLISHED","title":"IBM MQ denial of service","description":"IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages.  IBM X-Force ID:  250397.","publishedAt":"2023-07-19T01:49:14.604Z","updatedAt":"2024-10-21T15:35:56.231Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM MQ","IBM MQ Appliance"],"affected":[{"vendor":"IBM","product":"MQ","defaultStatus":"unaffected","versions":[{"version":"9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, 9.3 CD","status":"affected"}]},{"vendor":"IBM","product":"MQ Appliance","defaultStatus":"unaffected","versions":[{"version":"9.2 LTS, 9.3 LTS, 9.2 CD, 9.2 LTS","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/7007421","https://www.ibm.com/support/pages/node/7007731","https://exchange.xforce.ibmcloud.com/vulnerabilities/250397"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/28xxx/CVE-2023-28513.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-28513","state":"PUBLISHED","datePublished":"2023-07-19T01:49:14.604Z","dateUpdated":"2024-10-21T15:35:56.231Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-03-16T21:05:38.974Z"},"containers":{"cna":{"title":"IBM MQ denial of service","descriptions":[{"lang":"en","value":"IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages.  IBM X-Force ID:  250397."}],"affected":[{"vendor":"IBM","product":"MQ","defaultStatus":"unaffected","versions":[{"version":"9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, 9.3 CD","status":"affected"}]},{"vendor":"IBM","product":"MQ Appliance","defaultStatus":"unaffected","versions":[{"version":"9.2 LTS, 9.3 LTS, 9.2 CD, 9.2 LTS","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7007421","tags":["vendor-advisory"]},{"url":"https://www.ibm.com/support/pages/node/7007731","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/250397","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-07-19T01:49:14.604Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7007421","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.ibm.com/support/pages/node/7007731","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/250397","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T13:43:23.049Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-21T15:34:38.689370Z","id":"CVE-2023-28513","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-21T15:35:56.231Z"}}]}}}