{"id":"CVE-2024-51470","aliases":["EUVD-2024-45782","GHSA-2663-jm96-pp8f"],"status":"published","title":"IBM MQ denial of service","description":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00696,"percentile":0.53355,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-754"],"published":"2024-12-18T19:56:10Z","modified":"2026-06-17T08:05:45Z","products":[{"vendor":"ibm","product":"mq"},{"vendor":"ibm","product":"mq appliance"},{"vendor":"ibm","product":"mq for hpe nonstop"},{"vendor":"ibm","product":"mq_appliance"},{"vendor":"ibm","product":"mq_for_hpe_nonstop"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7179137","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7178085","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7177593","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51470"},{"url":"https://github.com/advisories/GHSA-2663-jm96-pp8f"}],"sources":{"cve":[{"id":"CVE-2024-51470","title":"IBM MQ denial of service","description":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.","status":"published","published":"2024-12-18T19:56:10.377Z","modified":"2024-12-18T20:24:38.409Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:34:01.972857Z"}],"euvd":[{"id":"EUVD-2024-45782","description":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.","status":"published","published":"2024-12-18T19:56:10Z","modified":"2024-12-18T20:24:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:34.09119Z"}],"ghsa":[{"id":"GHSA-2663-jm96-pp8f","title":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4...","description":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.","status":"published","published":"2024-12-18T21:30:56Z","modified":"2024-12-18T21:31:03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:59:14.104556Z"}],"nvd":[{"id":"CVE-2024-51470","description":"IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.","status":"published","published":"2024-12-18T20:15:23.233Z","modified":"2026-06-17T08:05:45.43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:10:40.507978Z"}]}}