Internet Bug Bounty: ZeroMQ libzmq remote code execution

Bug report and exploit: https://github.com/zeromq/libzmq/issues/3351 Fix by me: https://github.com/zeromq/libzmq/pull/3353 My motive for full disclosure is as follows: Is it true that it is not safe to use ZeroMQ over the internet because it will crash? Earlier versions of the ZeroMQ library befo...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...

Open Source Invalid Traffic Detection: Nameles

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...

tcpdump Integer Overflow Vulnerability

tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. An integer overflow vulnerability exists in the zmtp1printframe...

Man-in-the-Middle (MitM)

libzmq aka ZeroMQ is vulnerable to man-in-the-middle MitM attacks. To accept a connection as client or server, streamengine.cpp does not properly validate that the protection mechanism set on the socket matches that of the other party...

Integer overflow

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

DEBIAN-CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7938

CVE-2016-7938 affects tcpdump prior to 4.9.0, where the ZeroMQ parser contains an integer overflow in print-zeromq.c:zmtp1_print_frame(). The issue enables remote exploitation via crafted network traffic, with potential arbitrary code execution on the affected host. The vulnerability is addressed...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

[SECURITY] Fedora 24 Update: fedmsg-0.18.2-1.fc24

Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

[SECURITY] Fedora 25 Update: fedmsg-0.18.2-1.fc25

Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...

UBUNTU-CVE-2016-8598

Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...

SUSE SLED12 Security Update : zeromq (SUSE-SU-2015:1510-1)

zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed : - boo912460: avoid curve test to hang for ppc ppc64 ppc64l...

SUSE-SU-2015:1510-1 Security update for zeromq

zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed: CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed: boo912460: avoid curve test to hang for ppc ppc64 ppc64le...

Object Scanning System: Laika BOSS

Laika is an object scanner and intrusion detection system that strives to achieve the following goals: Scalable Work across multiple systems High volume of input from many sources Flexible Modular architecture Highly configurable dispatching and dispositioning logic Tactical code insertion withou...