CVE-2024-40680

📊 5.5 MEDIUM0.0%🎯 0 exploits
📅 Published Sep 7, 2024
📋 Status: Modified

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.

🎯 Affected Products & Systems

2 product configurations affected

Filter by type:
📱
Application
Vulnerable
Version: 2.0.26
CPE:
cpe:2.3:a:ibm:mq_operator:2.0.26:*:*:*:-:*:*:*
📱
Application
Vulnerable
Version: 3.2.4
CPE:
cpe:2.3:a:ibm:mq_operator:3.2.4:*:*:*:-:*:*:*
Metrics
5.5 MEDIUMCVSS v3.1[email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
LOW
User Interaction:
NONE
Confidentiality:
NONE
Integrity:
NONE
Availability:
HIGH
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Modified
CVSS Details
5.5 (MEDIUM)v3.1
EPSS Details
0.0% (Minimal)7.6th percentile
Last updated: Oct 31, 2025
Exploitation probability within 30 days
Published Date
Sep 7, 2024 (1 year ago)
Last Modified
Oct 31, 2024 (1 year ago)
Security Weaknesses2
References2