CVE-2023-28513

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:mq:9.0.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:9.2.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq:9.2.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:9.3.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq:9.3.0:*:*:*:lts:*:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:lts:*:*:*

History

21 Nov 2024, 07:55

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7007421 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/7007421 - Patch, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7007731 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/7007731 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : 5.9

31 Jul 2023, 18:52

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Linux linux Kernel
Ibm mq
Oracle
Oracle solaris
Microsoft windows
Ibm
Ibm mq Appliance
Microsoft
Hp hp-ux
Linux
Ibm aix
Ibm i
Hp
Ibm linux On Ibm Z
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:ibm:mq:9.3.0:*:*:*:lts:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.2.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:9.3.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:lts:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.2.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:lts:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.0.0.0:*:*:*:lts:*:*:*
References (MISC) https://www.ibm.com/support/pages/node/7007731 - (MISC) https://www.ibm.com/support/pages/node/7007731 - Patch, Vendor Advisory
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 - VDB Entry, Vendor Advisory
References (MISC) https://www.ibm.com/support/pages/node/7007421 - (MISC) https://www.ibm.com/support/pages/node/7007421 - Patch, Vendor Advisory

19 Jul 2023, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-19 02:15

Updated : 2024-11-21 07:55


NVD link : CVE-2023-28513

Mitre link : CVE-2023-28513

CVE.ORG link : CVE-2023-28513


JSON object : View

Products Affected

ibm

  • mq_appliance
  • aix
  • linux_on_ibm_z
  • i
  • mq

oracle

  • solaris

microsoft

  • windows

linux

  • linux_kernel

hp

  • hp-ux
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo