CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ는 고성능 비동기 메시징 라이브러리로, 분산 또는 병렬 컴퓨팅 환경을 위해 효율적이고 유연한 메시지 전달 메커니즘을 제공합니다. ZeroMQ는 다양한 메시징 패턴예: 요청-응답, 발행-구독, 푸시-풀, 프록시 등을 제공하며, 여러 전송 프로토콜TCP, IPC, PGM 등을 지원합니다. ZeroMQ의 설계 목표는 네트워크 프로그래밍을 단순화하고 효율적인 메시지 큐를 제공하여 성능을 향상시키는 것입니다. libzmq libzmq는 ZeroMQ의 핵심 구현...

cve-2019-6250-lab

CVE-2019-6250 — libzmq 사전 인증 RCE 랩 CVE-2019-6250 에 대한 종단 간 작동 RCE 체인 + 재현 가능한 랩입니다. libzmq의 v2decodert::sizeready에 있는 사전 인증 힙 버퍼 오버플로 취약점입니다. uint64t 포인터 산술 오버플로를 통해 인증되지 않은 피어가 ZMTP/2.0 와이어 경로에서 인접한 msgt::contentt::ffn 함수 포인터를 덮어쓴 다음 TCP 소켓 종료v2decodert → inprogress.close → 를 통해 트리거할 수 있습니다...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE 스택 오버플로 → RCE 실습 환경 CVE-2019-13132에 대한 완전한 RCE 익스플로잇 + 재현 가능한 실습 환경입니다. 이는 libzmq의 CURVE INITIATE 핸드셰이크 핸들러의 스택 버퍼 오버플로 취약점입니다. 공격자가 서버의 장기 공개 키설계상 공개 매개변수를 알고 있으면 processinitiate의 고정 크기 스택 버퍼를 오버플로하여 저장된 반환 주소를 덮어쓰고 실행 흐름을 임의 코드로 리디렉션할 수 있습니다. Nicolas Krass...

Exploit for Out-of-bounds Write in Zeromq Libzmq

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE la...

EUVD-2014-7076

Malware in sbrugna...

EUVD-2020-23928

Malware in sbrugna...

EUVD-2014-7077

Malware in sbrugna...

EUVD-2014-9527

Malware in sbrugna...

SUSE CVE-2014-7203

libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...

SUSE CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

SUSE CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

SUSE CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

ZeroMQ libzmq Buffer Overflow Vulnerability

ZeroMQ libzmq 0MQ is a lightweight distributed messaging engine core library. A buffer overflow vulnerability exists in ZeroMQ libzmq, which stems from the failure of zmq::tcp read in this product to validate memory boundaries during a call, resulting in an out-of-bounds read operation that can b...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

Heap overflow

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235. Remediation Upgrade zeromq to version 4.3.3 or higher. References - Github.com - GitHub Commit...

CVE-2020-36400

CVE-2020-36400 affects ZeroMQ libzmq 4.3.3 and is a heap-based buffer overflow in zmq::tcp_read. Connected sources describe a remote, unauthenticated attacker triggering a buffer overflow on the zeromq server when receiving crafted input, potentially impacting availability, data integrity, and co...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

ZeroMQ Denial of Service Vulnerability

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in versions prior to ZeroMQ 4.3.1-4+deb10u2. The vulnerability originates from a remote unauthenticated client running using the libzmq library to connect to an application and can be exploited by ...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5458470013501440 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...