CVE-2019-4560
MEDIUMIBM MQ Appliance 8.0.0.0-8.0.0.12, 9.0.0.0-9.0.0.7, 9.1.1-9.1.3 DoS via Poorly Formatted Message
Title source: llmDescription
IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/1106037
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/166357
Scores
CVSS v3
6.5
EPSS
0.0106
EPSS Percentile
60.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (3)
ibm/mq_appliance
8.0.0.0 - 8.0.0.13
ibm/mq_appliance
9.0.0.0 - 9.0.0.8
ibm/mq_appliance
9.1.1 - 9.1.4
Published
Dec 16, 2019
Tracked Since
Feb 18, 2026