3 matches found
MGASA-2020-0367 Updated zeromq packages fix security vulnerability
If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them...
MGASA-2019-0323 Updated zeromq packages fix security vulnerability
A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer...
MGASA-2019-0054 Updated zeromq packages fix security vulnerability
CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow...