Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : ZeroMQ vulnerabilities (USN-4920-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4920-1 advisory. It was discovered that ZeroMQ incorrectly handled certain application metadata. A remote attacker could use this issue to cause...

CVE-2021-20237

CVE-2021-20237 affects ZeroMQ (src/xpub.cpp) for versions before 4.3.3. A remote, unauthenticated attacker can send crafted PUB messages to trigger a memory leak if CURVE/ZAP authentication is disabled, leading to denial of service and potential memory exhaustion. Public details confirm the vulne...