CVE-2020-4465

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:mq_appliance:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_appliance:*:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_appliance:*:*:*:*:continuous_delivery:*:*:*

History

21 Nov 2024, 05:32

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/181562 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/181562 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/6252783 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/6252783 - Patch, Vendor Advisory

Information

Published : 2020-07-28 12:15

Updated : 2024-11-21 05:32


NVD link : CVE-2020-4465

Mitre link : CVE-2020-4465

CVE.ORG link : CVE-2020-4465


JSON object : View

Products Affected

ibm

  • mq_appliance
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')