Vulnerability · Published Apr 27, 2024 · Assigned by ibm
CVE-2024-25048IBM MQ code execution
High 7.5
In plain English
A high-severity heap buffer overflow in MQ Appliance from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | MQ Appliance | 9.3 LTS, 9.3 CD |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H