CVE-2026-12343

Published: Oct 19, 2026Modified: Oct 23, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.

Affected (109)

Products: Ibm: Mq Operator, Supplied Mq Advanced Container Images

Ibm

2 products

Mq Operator

Supplied Mq Advanced Container Images

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Ibm Mq Operator	2.0.0 ≤ version ≤ 2.0.29
Ibm Mq Operator	3.2.0 ≤ version ≤ 3.2.29
Ibm Mq Operator	Version 3.3.0
Ibm Mq Operator	Version 3.4.0
Ibm Mq Operator	Version 3.4.1
Ibm Mq Operator	Version 3.5.0
Ibm Mq Operator	Version 3.5.1
Ibm Mq Operator	Version 3.5.2
Ibm Mq Operator	Version 3.5.3
Ibm Mq Operator	Version 3.6.0
Ibm Mq Operator	Version 3.6.1
Ibm Mq Operator	Version 3.6.2
Ibm Mq Operator	Version 3.6.3
Ibm Mq Operator	Version 3.6.4
Ibm Mq Operator	Version 3.7.0
Ibm Mq Operator	Version 3.7.1
Ibm Mq Operator	Version 3.7.2
Ibm Mq Operator	Version 3.8.0
Ibm Mq Operator	Version 3.8.1
Ibm Mq Operator	Version 3.9.0
Ibm Mq Operator	Version 3.9.1
Ibm Mq Operator	Version 3.9.2
Ibm Mq Operator	Version 4.0.0
Ibm Mq Operator	Version 4.0.1
Ibm Mq Operator	Version 4.0.2
Ibm Mq Operator	Version 4.0.3
Ibm Mq Operator	Version 4.0.4
Ibm Supplied Mq Advanced Container Images	Version 10.0.0.0 r1
Ibm Supplied Mq Advanced Container Images	Version 10.0.0.0 r2
Ibm Supplied Mq Advanced Container Images	Version 10.0.0.0 r3
Ibm Supplied Mq Advanced Container Images	Version 10.0.0.0 r4
Ibm Supplied Mq Advanced Container Images	Version 10.0.0.5 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.1.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.1.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.1.1 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.2.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.2.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.2.1 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.2.1 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.3.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.3.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.3.1 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.3.1 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.3.1 r3
Ibm Supplied Mq Advanced Container Images	Version 9.4.4.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.4.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.4.0 r3
Ibm Supplied Mq Advanced Container Images	Version 9.4.4.0 r4
Ibm Supplied Mq Advanced Container Images	Version 9.4.4.1 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.5.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.5.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.5.1 r1

Configuration B

35 vulnerable

Vulnerable Software	Affected Versions
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.0 r3
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.10 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.10 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.11 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.11 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.15 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.16 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.16 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.17 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.17 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.17 r3
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.1 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.1 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.1 r3
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.1 r4
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.20 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.20 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.21 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.21 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.21 r3
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.25 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.3 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.4 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.4 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.5 r1
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.5 r2
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.5 r3
Ibm Supplied Mq Advanced Container Images	Version 9.3.0.6 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.0 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.0 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.0 r3
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.5 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.5 r2

Configuration C

22 vulnerable

Vulnerable Software	Affected Versions
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.10 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.10 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.11 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.11 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.11 r3
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.12
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.12 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.15 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.15 r4
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.16 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.16 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.17 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.17 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.20 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.21 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.21 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.25 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.25 r3
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.26 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.6 r1
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.6 r2
Ibm Supplied Mq Advanced Container Images	Version 9.4.0.7 r1

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (1)

https://www.ibm.com/support/pages/node/7292667

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.