CVE-2021-29843
First published: Thu Nov 04 2021(Updated: )
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM MQ Appliance | >=9.1.0.0<9.1.0.9 | |
| IBM MQ Appliance | >=9.1.0.0<9.2.3 | |
| IBM MQ Appliance | >=9.2.0.0<9.2.0.3 | |
| IBM MQ Appliance | <=9.1 LTS | |
| IBM MQ Appliance | <=9.1 CD | |
| IBM MQ Appliance | <=9.2 LTS | |
| IBM MQ Appliance | <=9.2 CD |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-29843.
What is the title of the vulnerability?
The title of the vulnerability is 'IBM MQ is vulnerable to a denial of service attack caused by an issue processing message properties.'
What is the severity rating of CVE-2021-29843?
The severity rating of CVE-2021-29843 is medium.
Which versions of IBM MQ Appliance are affected by this vulnerability?
IBM MQ Appliance versions 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2 CD are affected by this vulnerability.
How can I fix CVE-2021-29843?
To fix CVE-2021-29843, it is recommended to apply the latest security updates provided by IBM.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm mq appliance
- version/ibm mq appliance/9.1.0.0
- version/ibm mq appliance/9.2.0.0
- version/ibm mq appliance/9.1 lts
- version/ibm mq appliance/9.1 cd
- version/ibm mq appliance/9.2 lts
- version/ibm mq appliance/9.2 cd