| Package | Affected versions | Patched versions |
|---|---|---|
| mq operator | = 3.3.0= 3.4.0= 3.4.1= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.7.0= 3.7.1= 3.7.2= 3.8.0= 3.8.1= 3.9.0= 3.9.1= 3.9.2= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≥ 2.0.0, ≤ 2.0.29≥ 3.2.0, ≤ 3.2.29 | |
| supplied mq advanced container images | = 10.0.0.0= 10.0.0.5= 9.3.0.0= 9.3.0.1= 9.3.0.10= 9.3.0.11= 9.3.0.15= 9.3.0.16= 9.3.0.17= 9.3.0.20= 9.3.0.21= 9.3.0.25= 9.3.0.3= 9.3.0.4= 9.3.0.5= 9.3.0.6= 9.4.0.0= 9.4.0.10= 9.4.0.11= 9.4.0.12= 9.4.0.15= 9.4.0.16= 9.4.0.17= 9.4.0.20= 9.4.0.21= 9.4.0.25= 9.4.0.26= 9.4.0.5= 9.4.0.6= 9.4.0.7= 9.4.1.0= 9.4.1.1= 9.4.2.0= 9.4.2.1= 9.4.3.0= 9.4.3.1= 9.4.4.0= 9.4.4.1= 9.4.5.0= 9.4.5.1 |
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free