Denial-of-Service (DoS)

libzmq.so is vulnerable to denial of service DoS. Connecting session's peer pipe pipe before successful handshake does not guarantee the server to receive any message from a user with TCP public endpoint configured with CURVE/ZAP-protected...

Arbitrary Code Execution

libzmq.so is vulnerable to arbitrary code execution. A pointer overflow in the zmq::v2decodert::sizeready function in v2decoder.cpp allows an authenticated attacker to overwrite the bounds of a buffer and execute arbitrary OS commands on the system...