Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-7202
HistoryOct 08, 2014 - 7:55 p.m.

CVE-2014-7202

2014-10-0819:55:04
[email protected]
web.nvd.nist.gov
24
cve-2014-7202
libzmq
zeromq
nvd
security issue

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.4%

JSON

stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.

Affected configurations

NVD
Node
zeromqzeromqMatch4.0.0
OR
zeromqzeromqMatch4.0.4

Related

veracode 1
nvd 1
ubuntucve 1
cvelist 1
prion 1
debiancve 1
nessus 2
archlinux 1
veracode
veracode
Man-in-the-Middle (MitM)
2017-02-02 06:48:43
nvd
nvd
CVE-2014-7202
2014-10-08 19:55:04
ubuntucve
ubuntucve
CVE-2014-7202
2014-10-08 00:00:00
cvelist
cvelist
CVE-2014-7202
2014-10-08 19:00:00
prion
prion
Cross site request forgery (csrf)
2014-10-08 19:55:00
debiancve
debiancve
CVE-2014-7202
2014-10-08 19:55:04
nessus
nessus
openSUSE Security Update : zeromq (openSUSE-SU-2014:1381-1)
2014-11-11 00:00:00
openSUSE Security Update : zeromq (openSUSE-SU-2014:1493-1)
2014-11-26 00:00:00
archlinux
archlinux
zeromq: Man-in-the-middle downgrade and replay attack
2014-10-15 00:00:00

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.4%

JSON
Related for CVE-2014-7202
veracode1nvd1ubuntucve1cvelist1prion1debiancve1nessus2archlinux1