Medium severity · published May 1, 2025
CVE-2025-27365
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client…
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10
Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
MQ Operator · Ibm
2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.10; +7 more · source: NVD
SM
Supplied MQ Advanced Container Images · Ibm
9.2.0.1; 9.2.0.1; 9.2.0.2; 9.2.0.2; 9.2.0.2; 9.2.0.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-27365
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-27365
Vendor Advisory
https://www.ibm.com/support/pages/node/7232272
More from MQ Operator
9.8
CVE-2026-12665
IBM MQ Buffer Overflow
9.8
CVE-2025-36041
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through…
9.8
CVE-2024-39742
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability
8.8
CVE-2026-10572
IBM MQ Buffer Overflow
8.8
CVE-2026-10574
IBM MQ Buffer Overflow