CVE-2024-39743

MEDIUM

IBM MQ Operator < 2.0.24 - Denial of Service

Title source: rule

Description

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.

References (2)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7159714

[VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/297172

Scores

CVSS v3 5.9

EPSS 0.0022

EPSS Percentile 45.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-405

Status published

Products (3)

ibm/mq_operator 3.0.0

ibm/mq_operator 3.0.1

ibm/mq_operator 2.0.0 - 2.0.24

Published Jul 08, 2024

Tracked Since Feb 18, 2026