CVE-2009-3160

EPSS 0.66%
Published 10.09.2009 18:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Websphere Mq Version6

Ibm ≫ Websphere Mq Version6.0

Ibm ≫ Websphere Mq Version6.0.0.0

Ibm ≫ Websphere Mq Version6.0.1.0

Ibm ≫ Websphere Mq Version6.0.1.1

Ibm ≫ Websphere Mq Version6.0.2.0

Ibm ≫ Websphere Mq Version6.0.2.1

Ibm ≫ Websphere Mq Version6.0.2.2

Ibm ≫ Websphere Mq Version6.0.2.3

Ibm ≫ Websphere Mq Version6.0.2.4

Ibm ≫ Websphere Mq Version6.0.2.5

Ibm ≫ Websphere Mq Version6.0.2.6

Ibm ≫ Websphere Mq Version6.0.2.7

Ibm ≫ Websphere Mq Version7.0.0.0

Ibm ≫ Websphere Mq Version7.0.0.1

Ibm ≫ Websphere Mq Version7.0.0.2

Ibm ≫ Websphere Mq Version7.0.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.66%	0.686

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	8.6	9.2	AV:N/AC:M/Au:N/C:N/I:C/A:C

http://secunia.com/advisories/36647

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg24024153

Patch

Vendor Advisory

http://www.securityfocus.com/bid/36310

http://www.vupen.com/english/advisories/2009/2578

Patch

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259

https://nvd.nist.gov/vuln/detail/CVE-2009-3160

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-3160

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-3160

EUVD