CVE-2024-49823: IBM Common Cryptographic Architecture denial of service

Published Mar 10, 2025
·
Updated

IBM CCA could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.

Other sources

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.

MITRE

Affected Software

7 affected components
IBM Common Cryptographic Architecture>=7.0.0<=7.5.51
IBM CCA 7.x MTM for 4769<=7.0.0 - 7.5.51
IBM 4769 Developers Toolkit<=7.0.0 - 7.5.51
All of the following
IBM Common Cryptographic Architecture>=7.0.0<7.5.52
Any of the following
IBM AIX
IBM i
Linux Linux kernel

Event History

Mar 10, 2025
CVE Published
via IBM·12:00 AM
Mar 11, 2025
CVE Published
via MITRE·12:48 AM
Data Sourced
via MITRE·12:48 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2024-49823?

CVE-2024-49823 has been categorized as a denial of service vulnerability affecting IBM CCA.

2

Who is affected by CVE-2024-49823?

IBM Common Cryptographic Architecture versions 7.0.0 through 7.5.51 are affected by CVE-2024-49823.

3

What can an authenticated user do with CVE-2024-49823?

An authenticated user can exploit CVE-2024-49823 to cause denial of service in the Hardware Security Module (HSM) by sending a specially crafted sequence of requests.

4

How do I fix CVE-2024-49823?

To address CVE-2024-49823, it is recommended to update IBM CCA to the latest version that resolves this vulnerability.

5

What impact does CVE-2024-49823 have on systems?

CVE-2024-49823 can lead to service disruptions affecting the availability of the Hardware Security Module (HSM) for authorized users.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203