Vulnerability Details CVE-2024-25048
IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.4%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2024-25048
-
cpe:2.3:a:ibm:mq_appliance:9.3.0.0
-
cpe:2.3:a:ibm:mq_appliance:9.3.0.5
-
cpe:2.3:a:ibm:mq_appliance:9.3.1
-
cpe:2.3:a:ibm:mq_appliance:9.3.2
-
cpe:2.3:a:ibm:mq_appliance:9.3.2.1