CVE-2022-31772: Input Validation
First published: Fri Nov 11 2022(Updated: )
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM MQ | =8.0.0.0 | |
| IBM MQ | =9.0.0.0 | |
| IBM MQ | =9.1.0 | |
| IBM MQ | =9.1.0.0 | |
| IBM MQ | =9.2.0 | |
| IBM MQ | =9.2.0 | |
| HP HP-UX | ||
| IBM AIX | ||
| IBM i | ||
| Ibm Linux On Ibm Z | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Oracle Solaris | ||
| IBM Sterling Secure Proxy | <=6.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-31772.
What is the severity rating of CVE-2022-31772?
The severity rating of CVE-2022-31772 is medium (6.5).
Which software versions are affected by CVE-2022-31772?
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS are affected by CVE-2022-31772.
How can an authenticated and authorized user exploit CVE-2022-31772?
An authenticated and authorized user can exploit CVE-2022-31772 to cause a denial of service to the MQTT channels.
Is there a patch available to fix CVE-2022-31772?
Yes, there is a patch available to fix CVE-2022-31772. Please refer to the IBM support page for more information.
- collector/nvd-index
- collector/ibm-support
- agent/weakness
- vendor/ibm
- canonical/ibm mq
- version/ibm mq/8.0.0.0
- version/ibm mq/9.0.0.0
- version/ibm mq/9.1.0
- version/ibm mq/9.1.0.0
- version/ibm mq/9.2.0
- vendor/hp
- canonical/hp hp-ux
- canonical/ibm aix
- canonical/ibm i
- canonical/ibm linux on ibm z
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris
- canonical/ibm sterling secure proxy
- version/ibm sterling secure proxy/6.0.3