| Package | Affected versions | Patched versions |
|---|---|---|
| mq operator | = 3.3.0= 3.4.0= 3.4.1= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.7.0= 3.7.1= 3.7.2= 3.8.0= 3.8.1= 3.9.0= 3.9.1= 3.9.2= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≥ 2.0.0, ≤ 2.0.29≥ 3.2.0, ≤ 3.2.29 | |
| supplied mq advanced container images | = 10.0.0.0= 10.0.0.5= 9.3.0.0= 9.3.0.1= 9.3.0.10= 9.3.0.11= 9.3.0.15= 9.3.0.16= 9.3.0.17= 9.3.0.20= 9.3.0.21= 9.3.0.25= 9.3.0.3= 9.3.0.4= 9.3.0.5= 9.3.0.6= 9.4.0.0= 9.4.0.10= 9.4.0.11= 9.4.0.12= 9.4.0.15= 9.4.0.16= 9.4.0.17= 9.4.0.20= 9.4.0.21= 9.4.0.25= 9.4.0.26= 9.4.0.5= 9.4.0.6= 9.4.0.7= 9.4.1.0= 9.4.1.1= 9.4.2.0= 9.4.2.1= 9.4.3.0= 9.4.3.1= 9.4.4.0= 9.4.4.1= 9.4.5.0= 9.4.5.1 |
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free