CVE-2009-3160

Опубликовано: 10 сент. 2009

Источник: nvd

CVSS2: 8.8

EPSS Низкий

Описание

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

Ссылки

http://secunia.com/advisories/36647
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24024153
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578
Patch
Vendor Advisory
http://secunia.com/advisories/36647
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24024153
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_mq:6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:6.0.2.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00656

Низкий

8.8 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vgcq-wc9x-jmjv

github

почти 4 года назад