cve-2019-6250-lab

CVE-2019-6250 — libzmq pre-auth RCE lab End-to-end working RCE chain + reproducible lab for CVE-2019-6250 , the pre-auth heap-buffer-overflow in libzmq's v2decodert::sizeready. A uint64t pointer-arithmetic overflow lets an unauthenticated peer overwrite the adjacent msgt::contentt::ffn function...

ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)

An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...

CVE-2019-6250

A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4.2.x and 4.3.x before 4.3.1. A v2decoder.cpp zmq::v2decodert::sizeready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leverag...