Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-25048

IBM MQ code execution

Description

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM MQ Appliance

Default version status: unaffected

  • 9.3 LTS, 9.3 CDaffected

References