{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18142","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","state":"PUBLISHED","assignerShortName":"ibm","dateReserved":"2026-07-28T18:51:59.464Z","datePublished":"2026-11-04T20:21:55.509Z","dateUpdated":"2026-11-04T20:21:55.509Z"},"containers":{"cna":{"providerMetadata":{"orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm","dateUpdated":"2026-11-04T20:21:55.509Z"},"title":"IBM MQ is affected by a denial of service vulnerability","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound","type":"CWE"}]}],"affected":[{"vendor":"IBM","product":"MQ","versions":[{"status":"affected","version":"9.2.0.0","lessThanOrEqual":"9.2.0.44","versionType":"semver"},{"status":"affected","version":"9.3.0.0","lessThanOrEqual":"9.3.0.42","versionType":"semver"},{"status":"affected","version":"9.4.0.0","lessThanOrEqual":"9.4.0.26","versionType":"semver"},{"status":"affected","version":"9.4.0.0","lessThanOrEqual":"9.4.5.1","versionType":"semver"},{"status":"affected","version":"10.0.0.0","lessThanOrEqual":"10.0.0.5","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*"]}],"descriptions":[{"lang":"en","value":"IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.</p>"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7294663","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.1,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}}],"solutions":[{"lang":"en","value":"This issue was addressed under Known Issue DT500561.\n\n\n\nIBM MQ version 9.2 LTS\n\n\n\n Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts \n\n\n\nIBM MQ version 9.3 LTS\n\n\n\n Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts \n\n\n\nIBM MQ version 9.4 LTS\n\n\n\n Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94 \n\n\n\nIBM MQ version 10.0.LTS\n\n\n\n Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100 \n\n\n\nIBM MQ version 9.4 CD and 10.0 CD\n\n\n\n Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>This issue was addressed under Known Issue DT500561.</p><p>IBM MQ version 9.2 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.2.0.46</a></p><p>IBM MQ version 9.3 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.3.0.43</a></p><p>IBM MQ version 9.4 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94\" rel=\"noopener noreferrer nofollow\">Apply fix pack 9.4.0.30</a></p><p>IBM MQ version 10.0.LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.0.6</a></p><p>IBM MQ version 9.4 CD and 10.0 CD</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.1.0</a></p>"}]}]}}}