3 matches found
MGASA-2020-0367 Updated zeromq packages fix security vulnerability
If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them...
7.5CVSS7.5AI score0.03408EPSS
SaveExploits0References3
MGASA-2019-0323 Updated zeromq packages fix security vulnerability
A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer...
9.8CVSS9.7AI score0.41571EPSS
SaveExploits1References5
20