Updated zeromq packages fix security vulnerability

🗓️ 14 Nov 2019 16:58:51Reported by Gentoo FoundationType

Updated zeromq packages fix security vulnerability. Remote, unauthenticated client can cause stack overflow and overwrite stack with arbitrary data due to buffer overflow in libzmq

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm
FreeBSD	libzmq4 -- Stack overflow	27 Jun 201900:00	–	freebsd
ATTACKERKB	CVE-2019-13132	10 Jul 201919:15	–	attackerkb
AlpineLinux	CVE-2019-13132	10 Jul 201900:00	–	alpinelinux
GithubExploit	Exploit for Out-of-bounds Write in Zeromq Libzmq	4 May 202603:47	–	githubexploit
BDU FSTEC	The vulnerability of the libzmq library, a library for asynchronous messaging, arises from the possibility of operations going beyond the buffer boundaries in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.	16 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the libzmq library, a library for asynchronous messaging, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.	16 Oct 201900:00	–	bdu_fstec
Circl	CVE-2019-13132	4 May 202609:00	–	circl
CNVD	ZeroMQ Stack Buffer Overflow Vulnerability	9 Jul 201900:00	–	cnvd
Check Point Advisories	ZeroMQ libzmq Buffer Overflow (CVE-2019-13132)	18 Sep 201900:00	–	checkpoint_advisories

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	any	zeromq	4.3.2-1	zeromq-4.3.2-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2019/07/08/6
debian	www.debian.org/security/2019/dsa-4477
usn	www.usn.ubuntu.com/4050-1/

14 Nov 2019 16:58Current

3.7Low risk

Vulners AI Score3.7

CVSS 27.5

CVSS 3.19.8

EPSS0.18163