PT-2014-7834

Name of the Vulnerable Software and Affected Versions libzmq aka ZeroMQ/C++ version 4.0.5 Description The issue allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. Recommendations For libzmq aka ZeroMQ/C++ version 4.0.5, update to a version newer than...

PT-2014-7835

Name of the Vulnerable Software and Affected Versions libzmq versions 4.0.x through 4.0.4 Description The issue allows man-in-the-middle attackers to conduct replay attacks due to the lack of unique nonces. Recommendations For libzmq versions 4.0.x through 4.0.4, update to version 4.0.5 or later ...