CVE-2024-25048

moderate-risk

Published 2024-04-27

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.

Do I need to act?

0.61% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / HIGH complexity

Affected Products (2)

Mq Appliance

Affected Vendors

Ibm

References (4)

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/283137

Vendor Advisory https://www.ibm.com/support/pages/node/7149481

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/283137

Vendor Advisory https://www.ibm.com/support/pages/node/7149481

/ 100

moderate-risk

Severity 22/34 · High

Exploitability 2/34 · Minimal

Exposure 7/34 · Low