{"id":"CVE-2026-12343","title":"IBM MQ Denial of Service","summary":"IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-400"],"vendor":"IBM","product":"MQ Operator","affected":["mq_operator >= 3.2.0 <= 3.2.29","mq_operator >= 3.3.0 < 3.4.0","mq_operator 3.4.1","mq_operator 3.5.0","mq_operator >= 3.5.1 <= 3.5.3","mq_operator >= 3.6.0 <= 3.6.4","mq_operator >= 3.7.0 <= 3.7.2","mq_operator 3.8.0","mq_operator 3.8.1","mq_operator 3.9.0","mq_operator 3.9.1","mq_operator 3.9.2","mq_operator 4.0.0","mq_operator 4.0.1","mq_operator 4.0.2","mq_operator 4.0.3","mq_operator 4.0.4","mq_operator >= 2.0.0 <= 2.0.29","mq_advanced_container_images >= 9.4.0.6-r1 <= r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2","mq_advanced_container_images 9.4.0.6-r2","mq_advanced_container_images 9.4.0.7-r1","mq_advanced_container_images 9.4.0.10-r1","mq_advanced_container_images 9.4.0.10-r2","mq_advanced_container_images 9.4.0.11-r1","mq_advanced_container_images 9.4.0.11-r2","mq_advanced_container_images 9.4.0.11-r3","mq_advanced_container_images 9.4.0.12-r1","mq_advanced_container_images >= 9.4.0.15-r1 <= 9.4.0.15-r4","mq_advanced_container_images 9.4.0.16-r1","mq_advanced_container_images 9.4.0.16-r2","mq_advanced_container_images 9.4.0.17-r1","mq_advanced_container_images 9.4.0.17-r2","mq_advanced_container_images 9.4.0.20-r1","mq_advanced_container_images 9.4.0.21-r1","mq_advanced_container_images 9.4.0.21-r2","mq_advanced_container_images >= 9.4.0.25-r1 <= 9.4.0.25-r3","mq_advanced_container_images 9.4.0.26-r1","mq_advanced_container_images 9.4.1.0-r1","mq_advanced_container_images 9.4.1.0-r2","mq_advanced_container_images 9.4.1.1-r1","mq_advanced_container_images 9.4.2.0-r1","mq_advanced_container_images 9.4.2.0-r2","mq_advanced_container_images 9.4.2.1-r1","mq_advanced_container_images 9.4.2.1-r2","mq_advanced_container_images 9.4.3.0-r1","mq_advanced_container_images 9.4.3.0-r2","mq_advanced_container_images >= 9.4.3.1-r1 <= 9.4.3.1-r3","mq_advanced_container_images 9.4.4.0-r1","mq_advanced_container_images 9.4.4.1-r1","mq_advanced_container_images 9.4.5.0-r1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-19T17:52:09.253271Z"},"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T17:52:17.052Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-12343","references":[{"url":"https://www.ibm.com/support/pages/node/7292667"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T17:33:42.464Z","slug":"CVE-2026-12343","body":"## Overview\n\nIBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.\n\n## Affected\n\n- `mq_operator >= 3.2.0 <= 3.2.29`\n- `mq_operator >= 3.3.0 < 3.4.0`\n- `mq_operator 3.4.1`\n- `mq_operator 3.5.0`\n- `mq_operator >= 3.5.1 <= 3.5.3`\n- `mq_operator >= 3.6.0 <= 3.6.4`\n- `mq_operator >= 3.7.0 <= 3.7.2`\n- `mq_operator 3.8.0`\n- `mq_operator 3.8.1`\n- `mq_operator 3.9.0`\n- `mq_operator 3.9.1`\n- `mq_operator 3.9.2`\n- `mq_operator 4.0.0`\n- `mq_operator 4.0.1`\n- `mq_operator 4.0.2`\n- `mq_operator 4.0.3`\n- `mq_operator 4.0.4`\n- `mq_operator >= 2.0.0 <= 2.0.29`\n- `mq_advanced_container_images >= 9.4.0.6-r1 <= r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2`\n- `mq_advanced_container_images 9.4.0.6-r2`\n- `mq_advanced_container_images 9.4.0.7-r1`\n- `mq_advanced_container_images 9.4.0.10-r1`\n- `mq_advanced_container_images 9.4.0.10-r2`\n- `mq_advanced_container_images 9.4.0.11-r1`\n- `mq_advanced_container_images 9.4.0.11-r2`\n- `mq_advanced_container_images 9.4.0.11-r3`\n- `mq_advanced_container_images 9.4.0.12-r1`\n- `mq_advanced_container_images >= 9.4.0.15-r1 <= 9.4.0.15-r4`\n- `mq_advanced_container_images 9.4.0.16-r1`\n- `mq_advanced_container_images 9.4.0.16-r2`\n- `mq_advanced_container_images 9.4.0.17-r1`\n- `mq_advanced_container_images 9.4.0.17-r2`\n- `mq_advanced_container_images 9.4.0.20-r1`\n- `mq_advanced_container_images 9.4.0.21-r1`\n- `mq_advanced_container_images 9.4.0.21-r2`\n- `mq_advanced_container_images >= 9.4.0.25-r1 <= 9.4.0.25-r3`\n- `mq_advanced_container_images 9.4.0.26-r1`\n- `mq_advanced_container_images 9.4.1.0-r1`\n- `mq_advanced_container_images 9.4.1.0-r2`\n- `mq_advanced_container_images 9.4.1.1-r1`\n- `mq_advanced_container_images 9.4.2.0-r1`\n- `mq_advanced_container_images 9.4.2.0-r2`\n- `mq_advanced_container_images 9.4.2.1-r1`\n- `mq_advanced_container_images 9.4.2.1-r2`\n- `mq_advanced_container_images 9.4.3.0-r1`\n- `mq_advanced_container_images 9.4.3.0-r2`\n- `mq_advanced_container_images >= 9.4.3.1-r1 <= 9.4.3.1-r3`\n- `mq_advanced_container_images 9.4.4.0-r1`\n- `mq_advanced_container_images 9.4.4.1-r1`\n- `mq_advanced_container_images 9.4.5.0-r1`\n\n## Remediation\n\nIssues mentioned by this security bulletin are addressed in -\n\n  *  IBM MQ Operator  v4.1.0 https://www.ibm.com/docs/en/ibm-mq/10.0.x  CD release that included IBM supplied MQ Advanced  10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x  container image. \n  *  IBM MQ Operator  v4.0.5 https://www.ibm.com/docs/en/ibm-mq/10.0.x  SC2 release that included IBM supplied MQ Advanced  10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x  container image. \n  *  IBM MQ Operator  v3.2.30 https://www.ibm.com/docs/en/ibm-mq/9.4.x  SC2 release that included IBM supplied MQ Advanced  9.4.0.26-r2 https://www.ibm.com/docs/en/ibm-mq/9.4.x  container image.\n  *  IBM MQ Container  10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x  and  10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x  release.\n\n\n\n\nIBM strongly recommends applying the latest container images. \n\n\n\nIBM MQ Operator v4.1.0 CD release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv4.1.0\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.1.0-r1\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.1.0-r1\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Operator v4.0.5 SC2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv4.0.5\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.0.5-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.0.5-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Operator v3.2.30 SC2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv3.2.30\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40\n\n\n\nibm-mqadvanced-server\n\n\n\n9.4.0.26-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8\n\n\n\nibm-mqadvanced-server-integration\n\n\n\n9.4.0.26-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n9.4.0.26-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Container 10.0.1.0-r1 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.1.0-r1\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.1.0-r1\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Container 10.0.0.5-r2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.0.5-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.0.5-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}