İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 6.5

CVE-2026-12343: Mq Operator: denetimsiz kaynak tüketimi

Yayın: · Güncelleme:

Açıklama (NVD)

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.

Özet bilgiler

Ürün
Ibm Mq Operator
CVSS v3.1
6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
%0,24 (yüzdelik 15)
CWE
CWE-400
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
ibm-mq-operator2.0.02.0.29—
ibm-mq-operator3.2.03.2.29—
ibm-mq-operator3.3.03.3.0—
ibm-mq-operator3.4.03.4.0—
ibm-mq-operator3.4.13.4.1—
ibm-mq-operator3.5.03.5.0—
ibm-mq-operator3.5.13.5.1—
ibm-mq-operator3.5.23.5.2—
ibm-mq-operator3.5.33.5.3—
ibm-mq-operator3.6.03.6.0—
ibm-mq-operator3.6.13.6.1—
ibm-mq-operator3.6.23.6.2—
ibm-mq-operator3.6.33.6.3—
ibm-mq-operator3.6.43.6.4—
ibm-mq-operator3.7.03.7.0—
ibm-mq-operator3.7.13.7.1—
ibm-mq-operator3.7.23.7.2—
ibm-mq-operator3.8.03.8.0—
ibm-mq-operator3.8.13.8.1—
ibm-mq-operator3.9.03.9.0—
ibm-mq-operator3.9.13.9.1—
ibm-mq-operator3.9.23.9.2—
ibm-mq-operator4.0.04.0.0—
ibm-mq-operator4.0.14.0.1—
ibm-mq-operator4.0.24.0.2—
ibm-mq-operator4.0.34.0.3—
ibm-mq-operator4.0.44.0.4—
ibm-supplied-mq-advanced-container-images9.4.1.09.4.1.0—
ibm-supplied-mq-advanced-container-images9.4.1.09.4.1.0—
ibm-supplied-mq-advanced-container-images9.4.1.19.4.1.1—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları