« Volver al listado

CVE-2012-2199

Estado: ModificadaMedia (5)—

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Websphere MQ

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2199",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-25T20:55:00.940",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC82725",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21610285",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76434",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC82725",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21610285",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76434",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel."
    },
    {
      "lang": "es",
      "value": "El agente del canal de mensaje de servidor en el gestor de colas del servidor IBM WebSphere MQ v7.0.1 antes de v7.0.1.9, v7.1 y v7.5 en Solaris permite a atacantes remotos provocar una denegación de servicio (excepción por alineación de dirección inválida y caída del demonio) a través de vectores relacionados con un canal multiplexado.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:41:10.140",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6E60ABB-E703-4745-98F3-22609FF70F6F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDC03B4D-98C2-4704-9BF9-47888489B9C7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73E4EAA2-8842-41AB-B8E0-944CDF72C893"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D71A8D2-C97E-4A0D-B4F7-19E0B24AC887"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "362B6A59-1FFD-4C11-8F86-0A5516A36385"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5046C962-98D9-43C3-8D83-B144CE442A31"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A379F4E4-5A82-454A-B1D0-D4CAAD9E1457"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DECB8B77-BAB7-468E-8D22-57FE9F42F718"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CE2BBC9-7772-48FF-BDE5-D61F9E16BB0D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "417A12D5-4E6E-487E-9515-2410B3697639"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "164DC456-433C-4C47-91F9-1B57C2DFBF1E"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91F372EA-3A78-4703-A457-751B2C98D796"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}