CVE-2024-45662 Details

A denial-of-service vulnerability has been identified in IBM Safer Payments versions 6.4.0.00 through 6.4.2.07, 6.5.0.00 through 6.5.0.05, and 6.6.0.00 through 6.6.0.03. This vulnerability allows remote attackers to cause a denial of service by exploiting improper resource allocation, which can lead to buffer overflow and uncontrolled memory allocation errors. These issues can occur when remote systems send arbitrarily large requests to the Message Command Interface (MCI).

Users are advised to update IBM Safer Payments to version 6.4.2.08, 6.5.0.06, 6.6.0.04, 6.7.0.00 or higher. For the Message Command Interface (MCI), it is recommended to use TLS with client certificate validation or to implement an allow-list of IP addresses that may connect, reducing the number of remote systems that can exploit the vulnerability.