Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.8 views

The vulnerability of the zmq::tcp_read() function in the libzmq library, a library for asynchronous messaging in ZeroMQ, allows a attacker to cause a service failure.

The vulnerability of the zmq::tcpread function in the libzmq library, a library for asynchronous messaging, is related to the failure of write operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.8CVSS8AI score0.01842EPSS
Exploits0References7Affected Software2
CNNVD
CNNVD
added 2021/07/01 12:0 a.m.5 views

ZeroMQ libzmq 缓冲区错误漏洞

ZeroMQ libzmq 0MQ is a lightweight distributed messaging engine core library. A buffer overflow vulnerability exists in ZeroMQ libzmq, which stems from the failure of zmq::tcp read in this product to validate memory boundaries during a call, resulting in an out-of-bounds read operation that can b...

9.8CVSS8.6AI score0.01842EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.4 views

The vulnerability of the libzmq library, a library for asynchronous messaging, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libzmq library, a library for asynchronous messaging, is related to stack overflow and reallocation due to memory buffer overflow. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and caus...

10CVSS5.9AI score0.42464EPSS
Exploits1References7Affected Software4
OSV
OSV
added 2019/07/10 7:15 p.m.2 views

ALPINE-CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

9.8CVSS7.6AI score0.42464EPSS
Exploits1References1
OSV
OSV
added 2019/07/08 6:1 p.m.5 views

USN-4050-1 zeromq3 vulnerability

It was discovered that ZeroMQ incorrectly handled certain application metadata. A remote attacker could use this issue to cause ZeroMQ to crash, or possibly execute arbitrary code...

9.8CVSS7.4AI score0.42464EPSS
Exploits1References2
OSV
OSV
added 2019/01/13 3:29 p.m.1 views

UBUNTU-CVE-2019-6250

A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4.2.x and 4.3.x before 4.3.1. A v2decoder.cpp zmq::v2decodert::sizeready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leverag...

8.8CVSS7.6AI score0.09444EPSS
Exploits2References4
CNVD
CNVD
added 2015/06/05 12:0 a.m.3 views

libzmq Security Bypass Vulnerability

libzmq also known as ZeroMQ/C++ is a ZeroMQ lightweight messaging kernel core library. A security bypass vulnerability exists in libzmq. A remote attacker can exploit this vulnerability to perform a degradation attack via the ZMTP 2 and prior protocol headers to bypass the security mechanisms of...

4.3CVSS7AI score0.02529EPSS
Exploits0References1
OSV
OSV
added 2014/10/08 7:55 p.m.2 views

UBUNTU-CVE-2014-7202

streamengine.cpp in libzmq aka ZeroMQ/C++ 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request...

4.3CVSS7.3AI score0.02015EPSS
Exploits0References2
Rows per page
Query Builder