CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ is a high-performance asynchronous messaging library designed to provide an efficient and flexible message delivery mechanism for distributed or parallel computing environments. ZeroMQ offers multiple message delivery patterns such as request-reply,...

cve-2019-6250-lab

CVE-2019-6250 — libzmq pre-auth RCE lab End-to-end working RCE chain + reproducible lab for CVE-2019-6250 , the pre-auth heap-buffer-overflow in libzmq's v2decodert::sizeready. A uint64t pointer-arithmetic overflow lets an unauthenticated peer overwrite the adjacent msgt::contentt::ffn function...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE lab End-to-end working RCE exploit + reproducible lab for CVE-2019-13132 , a stack buffer overflow in libzmq's CURVE INITIATE handshake handler. An attacker who knows the server's long-term public key a public parameter by design can...

Exploit for Out-of-bounds Write in Zeromq Libzmq

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE la...

EUVD-2020-23928

Malware in sbrugna...

EUVD-2014-7076

Malware in sbrugna...

EUVD-2014-9527

Malware in sbrugna...

EUVD-2014-7077

Malware in sbrugna...

libzmq:test_connect_fuzzer: Segv on unknown address in test_connect_fuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6301312457703424 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: testconnectfuzzer Sanitizer: address ASAN...

libzmq:test_bind_fuzzer: Segv on unknown address in test_bind_fuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5083360966279168 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testbindfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: testbindfuzzer Sanitizer: address ASAN Crash...

Security update of zeromq/libzmq dependency

...

SUSE CVE-2014-7203

libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...

SUSE CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

SUSE CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

SUSE CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

libzmq:test_connect_stream_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5684588308987904 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectstreamfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Regresse...

libzmq:test_connect_ws_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4893005077676032 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectwsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Regressed:...

ZeroMQ libzmq Buffer Overflow Vulnerability

ZeroMQ libzmq 0MQ is a lightweight distributed messaging engine core library. A buffer overflow vulnerability exists in ZeroMQ libzmq, which stems from the failure of zmq::tcp read in this product to validate memory boundaries during a call, resulting in an out-of-bounds read operation that can b...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235. Remediation Upgrade zeromq to version 4.3.3 or higher. References - Github.com - GitHub Commit...