CVE-2020-4465

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an…

Medium5.3EPSS 1.9%

Published: 28 Jul 2020
Updated: 16 Sept 2024
Reserved: 30 Dec 2019
Assigned by: ibm

Description

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562.

Timeline

2019
30 Dec 2019
30 Dec 2019
ID reserved
By ibm
2020
28 Jul 20207 months later
28 Jul 2020· 7 months later
Published
2024
16 Sept 20244 years later
16 Sept 2024· 4 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2020-4465, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium5.3	CVSS:3.0/S:U/PR:L/AC:H/C:N/A:H/AV:N/UI:N/I:N/RL:O/RC:C/E:U
NVDNVD · Modified	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 1.9% · top 20% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

Denial of Service
CWE-120 (opens in a new tab)All about CWE-120 and its CVEs

Affected products

IBM · MQ Appliance
- affected 8.0
- affected 9.1.LTS
- affected 9.1.CD

References (2)

https://www.ibm.com/support/pages/node/6252783 (opens in a new tab)x_refsource_CONFIRMx_transferred
ibm-mq-cve20204465-dos (181562) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-4465](https://trackcve.app/badge/CVE-2020-4465.svg)](https://trackcve.app/cve/CVE-2020-4465)

Record last updated 16 Sept 2024, 23:56 UTC.