Vulnerability Details
Basic Information
| Title | CVE-2025-27365 IBM MQ Operator denial of service |
|---|---|
| Type | cvelist |
| Published | 2025-05-01T21:24:24 |
| Last Seen | 2025-05-01T21:47:28 |
| CVSS Score | 6.5 (MEDIUM) |
CVSS v3 Details
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
CVE Information
| CVE IDs | CVE-2025-27365 |
|---|---|
| CWE | CWE-416 |
| Bulletin Family | cve |
Description
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10
Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.
Impact Assessment
| Base Score | 6.5 |
|---|---|
| Severity | MEDIUM |