3 matches found
CVE-2019-6250-libzmq
CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ is a high-performance asynchronous messaging library designed to provide an efficient and flexible message delivery mechanism for distributed or parallel computing environments. ZeroMQ offers multiple message delivery patterns such as request-reply,...
ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)
An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...
CVE-2019-6250
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4.2.x and 4.3.x before 4.3.1. A v2decoder.cpp zmq::v2decodert::sizeready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leverag...