libzmq:socket_connect_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Detailed Report: https://oss-fuzz.com/testcase?key=5414863269789696 Project: libzmq Fuzzing Engine: afl Fuzz Target: socketconnectfuzzer Job Type: aflasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x625000013900 Crash State: zmq::tcpread...

libzmq:socket_connect_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5765226510417920 Project: libzmq Fuzzing Engine: honggfuzz Fuzz Target: socketconnectfuzzer Job Type: honggfuzzasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libzmq:test_connect_null_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5716323687727104 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectnullfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

libzmq:test_connect_null_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5696322561900544 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectnullfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libzmq:socket_bind_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5669751377625088 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: socketbindfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libzmq:decode_fuzzer: Stack-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5724808697610240 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

libzmq:decode_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5711455107416064 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsanlibzmq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x705df34cacf8 Crash State...

libzmq:decode_fuzzer: Segv on unknown address with empty stacktrace

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5631588512825344 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NU...

Updated zeromq packages fix security vulnerability

A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer...

The vulnerability of the libzmq library, a library for asynchronous messaging, arises from the possibility of operations going beyond the buffer boundaries in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libzmq library, a library for asynchronous messaging, is related to stack overflow and reallocation issues. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

ZeroMQ libzmq Buffer Overflow (CVE-2019-13132)

A buffer overflow vulnerability exists in ZeroMQ libzmq. Successful exploitation of this vulnerability could allow the execution of arbitrary code on the target machine...

Monero: CVE-2019-13132 - libzmq 4.1 series is vulnerable

Summary: A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4.2.x and 4.3.x before 4.3.1. A v2decoder.cpp zmq::v2decodert::sizeready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can b...

CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

Denial Of Service (DoS)

libzmq is vulnerable to denial of service DoS. The vulnerability exists through a stack buffer overflow issue in src/curveserver.cpp...

CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

DEBIAN-CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...

CVE-2019-13132

CVE-2019-13132 concerns ZeroMQ libzmq: a remote, unauthenticated client connecting to a libzmq app with a CURVE-enabled listening socket can trigger a stack/buffer overflow in the library, for libzmq versions up to just before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2. Public servers runn...

[SECURITY] [DSA 4477-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4477-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 08, 2019 https://www.debian.org/security/faq -...

CVE-2019-13132

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...