CVE-2021-20235

There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...

CVE-2021-20234

CVE-2021-20234 is a memory-leak/ uncontrolled resource consumption flaw in the ZeroMQ client before 4.3.3 (src/pipe.cpp). It can cause a client that connects to multiple malicious or compromised servers to crash, impacting availability. Affected: ZeroMQ client library (libzmq) prior to 4.3.3. Exp...

CVE-2021-20234

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

CVE-2021-20234

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

CVE-2021-20234

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

CVE-2021-20235: Buffer Copy without Checking Size of Input

There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...

CVE-2021-20234: Uncontrolled Resource Consumption

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

Updated zeromq packages fix security vulnerabilities

Memory leak in client induced by malicious server without CURVE/ZAP rhbz1921972. Stack overflow on server running PUB/XPUB socket rhbz1921976. Heap overflow when receiving malformed ZMTP v1 packets rhbz1921983. Memory leaks via metadata messages processed by PUB sockets rhbz1921989. Also, the...

PT-2021-30842

Name of the Vulnerable Software and Affected Versions zeromq affected versions not specified Description The issue involves several problems, including a memory leak in the client caused by a malicious server without CURVE/ZAP, a stack overflow on the server running PUB/XPUB socket, a heap overfl...

libzmq 缓冲区错误漏洞

ZeroMQ libzmq 0MQ is a lightweight distributed messaging engine core library. A security vulnerability exists in libzmq, which can be exploited by an attacker to trigger a denial of service and potentially run code via a buffer overflow via libzmq's ZMTP V1 packet...

PT-2021-3605 · Zeromq +3 · Zeromq +3

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Description: An uncontrolled resource consumption issue, specifically a memory leak flaw, was found in the ZeroMQ client. This issue can cause a client to crash if it connects to multiple malicious or compromise...

CVE-2021-20237

An uncontrolled resource consumption memory leak flaw was found in ZeroMQ's src/xpub.cpp. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highe...

CVE-2021-20235

There's a flaw in the zeromq server in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server could trigger a buffer...

CVE-2021-20236

A flaw was found in the ZeroMQ server. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

CVE-2021-20234

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

Fedora 33 : czmq (2021-c756747fd0)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-c756747fd0 advisory. - Downstream of zeromq, rebuilt to fix security issues FEDORA-2021-c756747fd0 Note that Nessus has not tested for this issue but has instead relied only on t...

Fedora: Security Advisory for zeromq (FEDORA-2021-8b3202b783)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 33 : zeromq (2021-8b3202b783)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8b3202b783 advisory. - An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a...

Important Photon OS Security Update - PHSA-2021-0357

Updates of 'atftp' packages of Photon OS have been released...

PT-2021-3606 · Check Point +3 · Gaia +4

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Check Point GAiA affected versions not specified Description: The issue is related to a buffer overflow in the ZeroMQ library, which can be exploited by a remote attacker to access confidential data, compromise...