Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0322

An update of 'zeromq' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0281

An update of 'elasticsearch', 'postgresql', 'kibana', 'zeromq' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2020-0322

Updates of 'zeromq' packages of Photon OS have been released...

CVE-2020-15166

A flaw was found in ZeroMQ, where the possibility of unauthenticated clients causes a denial of service that affects authenticated and encrypted clients. The highest threat from this vulnerability is to system availability. Mitigation Mitigation for this issue is either not available or the...

PT-2020-6204

Name of the Vulnerable Software and Affected Versions ZeroMQ versions prior to 4.3.3 Description The issue is related to an error in the resource control mechanism of ZeroMQ, a messaging system component. This allows a remote attacker to cause a denial-of-service. Users with TCP transport public...

PT-2020-21930

Name of the Vulnerable Software and Affected Versions ZeroMQ affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the zmq z85 decode function, zmq::options t::set curve key function, and zmq::options...

PT-2020-22621

Name of the Vulnerable Software and Affected Versions ZeroMQ affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the zmq::stream engine base t::out event function, which is called from zmq::epoll t::loop and...

PT-2020-22540

Name of the Vulnerable Software and Affected Versions ZeroMQ affected versions not specified Description The issue is related to a bad-cast in the ZeroMQ library, specifically when casting to zmq::session base t from an invalid vptr. This occurs in the zmq::stream engine base t::in event internal...

PT-2020-6974 · Zeromq +3 · Zeromq +3

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Description: An uncontrolled resource consumption flaw, also known as a memory leak, was found in ZeroMQ's src/xpub.cpp. This issue allows a remote unauthenticated attacker to send crafted PUB messages that...

SaltStack Salt Master/Minion Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits unauthenticated access to the runner and sendpub methods in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to execute code as root on either the master or on select minions. VMware vRealize Operations...

SaltStack Salt Master/Minion Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SaltStack Salt Master/Minion Unauthenticated RCE', 'Description' = %q This module exploits unauthenticated access to the runner and sendpub metho...

Saltstack 3000.1 Remote Code Execution

Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Exploit Author: Jasper Lievisse Adriaanse Vendor Homepage: https://www.saltstack.com/ Version: 3000.2, 2019.2.4, 2017., 2018. Tested on: Debian 10 with Salt 2019.2.0 CVE : CVE-2020-11651 and CVE-2020-11652 Discription:...

Salt Bugs Allow Full RCE as Root on Cloud Servers

The open-source Salt management framework contains high-severity security vulnerabilities that allow full remote code execution as root on servers in data centers and cloud environments. And in-the-wild attacks are expected imminently. According to F-Secure researchers, the framework, authored by...

SaltStack Salt Master/Minion Unauthenticated RCE

This module exploits unauthenticated access to the runner and sendpub methods in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to execute code as root on either the master or on select minions. VMware vRealize Operations Manager...

SaltStack Salt Master Server Root Key Disclosure

This module exploits unauthenticated access to the prepauthinfo method in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to disclose the root key used to authenticate administrative commands to the master. VMware vRealize Operations...

CVE-2020-11651

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the...

Critical Photon OS Security Update - PHSA-2020-0281

Updates of 'envoy', 'ncurses', 'unzip' packages of Photon OS have been released...

Fedora Update for zeromq FEDORA-2019-d20ce4d5a1

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MGASA-2019-0323 Updated zeromq packages fix security vulnerability

A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer...

Updated zeromq packages fix security vulnerability

A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer...