CVE-2023-45177

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-45177
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within the MQ clustering logic. IBM X-Force ID: 268066.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 Third Party Advisory VDB Entry
https://www.ibm.com/support/pages/node/7063661 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 Third Party Advisory VDB Entry
https://www.ibm.com/support/pages/node/7063661 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*
History

03 Jul 2025, 19:37

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 - Third Party Advisory, VDB Entry
References () https://www.ibm.com/support/pages/node/7063661 - () https://www.ibm.com/support/pages/node/7063661 - Vendor Advisory
CPE cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*
cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
First Time Linux
Microsoft windows
Oracle solaris
Ibm
Ibm i
Hp hp-ux
Ibm linux On Ibm Z
Oracle
Ibm mq
Hp
Linux linux Kernel
Ibm aix
Microsoft

21 Nov 2024, 08:26

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/268066 -
References () https://www.ibm.com/support/pages/node/7063661 - () https://www.ibm.com/support/pages/node/7063661 -
Summary
  • (es) IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS y 9.3 CD es vulnerable a un ataque de denegación de servicio debido a un error dentro de la lógica de agrupación en clústeres de MQ. ID de IBM X-Force: 268066.

20 Mar 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-20 18:15

Updated : 2025-07-03 19:37

NVD link : CVE-2023-45177

Mitre link : CVE-2023-45177

CVE.ORG link : CVE-2023-45177

JSON object : View

Products Affected

ibm

  • i
  • aix
  • linux_on_ibm_z
  • mq

linux

  • linux_kernel

hp

  • hp-ux

oracle

  • solaris

microsoft

  • windows
CWE
CWE-20

Improper Input Validation