cve-2019-6250-lab

CVE-2019-6250 — laboratorio RCE pre-autenticazione libzmq Catena RCE funzionante end-to-end + laboratorio riproducibile per CVE-2019-6250 , l'heap-buffer-overflow pre-autenticazione in libzmq's v2decodert::sizeready. Un overflow aritmetico di puntatore uint64t consente a un peer non autenticato d...

ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)

An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...