CVE-2019-4261
MEDIUMIBM MQ 7.1.0.0-7.1.0.8, 7.5, 8.0.0.0-8.0.0.10, 9.0.0.0-9.0.0.5, 9.1.0-9.1.1 - Denial of Service via Crafted Messages
Title source: llmDescription
IBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack caused by specially crafted messages. IBM X-Force ID: 160013.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10886887
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/160013
Scores
CVSS v3
6.5
EPSS
0.0235
EPSS Percentile
81.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (4)
ibm/mq
8.0.0.0 - 8.0.0.11
ibm/mq
9.0.0.0 - 9.0.0.6
ibm/mq
9.1.0 - 9.1.2
ibm/websphere_mq
7.1.0.0 - 7.1.0.9
Published
Aug 05, 2019
Tracked Since
Feb 18, 2026