libzmq 缓冲区错误漏洞

ZeroMQ libzmq 0MQ is a lightweight distributed messaging engine core library. A security vulnerability exists in libzmq, which can be exploited by an attacker to trigger a denial of service and potentially run code via a buffer overflow via libzmq's ZMTP V1 packet...

PT-2021-3605 · Zeromq +3 · Zeromq +3

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Description: An uncontrolled resource consumption issue, specifically a memory leak flaw, was found in the ZeroMQ client. This issue can cause a client to crash if it connects to multiple malicious or compromise...

CVE-2021-20237

An uncontrolled resource consumption memory leak flaw was found in ZeroMQ's src/xpub.cpp. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highe...

CVE-2021-20235

There's a flaw in the zeromq server in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server could trigger a buffer...

CVE-2021-20236

A flaw was found in the ZeroMQ server. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

CVE-2021-20234

An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...

Fedora 33 : czmq (2021-c756747fd0)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-c756747fd0 advisory. - Downstream of zeromq, rebuilt to fix security issues FEDORA-2021-c756747fd0 Note that Nessus has not tested for this issue but has instead relied only on t...

Fedora: Security Advisory for zeromq (FEDORA-2021-8b3202b783)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 33 : zeromq (2021-8b3202b783)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8b3202b783 advisory. - An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a...

Important Photon OS Security Update - PHSA-2021-0357

Updates of 'atftp' packages of Photon OS have been released...

PT-2021-3606 · Check Point +3 · Gaia +4

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Check Point GAiA affected versions not specified Description: The issue is related to a buffer overflow in the ZeroMQ library, which can be exploited by a remote attacker to access confidential data, compromise...

SUSE SLED15 / SLES15 Security Update : zeromq (SUSE-SU-2020:3264-1)

This update for zeromq fixes the following issues : CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 Fixed a memory leak in client induced by malicious servers without...

openSUSE Security Update : zeromq (openSUSE-2020-1907)

This update for zeromq fixes the following issues : - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

openSUSE Security Update : zeromq (openSUSE-2020-1910)

This update for zeromq fixes the following issues : - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

OPENSUSE-SU-2020:1910-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

Security update for zeromq (moderate)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2020:1910-1 Rating: moderate References: 1176116 1176256 1176257 1176258 1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has four fixes is n...

OPENSUSE-SU-2020:1907-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

Security update for zeromq (moderate)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2020:1907-1 Rating: moderate References: 1176116 1176256 1176257 1176258 1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has four fixes is n...

SUSE-SU-2020:3264-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

SUSE-SU-2020:3064-1 Security update for zeromq

This update for zeromq fixes the following issues: - Fixed a memory leak in client induced by malicious servers without CURVE/ZAP bsc1176257 - Fixed a stack overflow in PUB/XPUB subscription store bsc1176258...