CVE-2022-40237 - IBM MQ for HPE NonStop denial of service

Back Back to CVE browser

HIGH

IBM MQ for HPE NonStop denial of service

Published Feb 27, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.66%

Description

IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.

Affected products

Vendor IBM Product MQ for HPE NonStop Default
unaffected
- Version
  8.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

MQ for HPE NonStop

unaffected

Version	Status	Constraints
8.1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/235727
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6958136
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/235727		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6958136		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Feb 27, 2023

Updated Aug 3, 2024

Reserved Sep 8, 2022

Link CVE-2022-40237

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-40237

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-40237