368 matches found
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
[SECURITY] Fedora 24 Update: fedmsg-0.18.2-1.fc24
Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
[SECURITY] Fedora 25 Update: fedmsg-0.18.2-1.fc25
Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...
UBUNTU-CVE-2016-8598
Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...
SUSE SLED12 Security Update : zeromq (SUSE-SU-2015:1510-1)
zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed : - boo912460: avoid curve test to hang for ppc ppc64 ppc64l...
SUSE-SU-2015:1510-1 Security update for zeromq
zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed: CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed: boo912460: avoid curve test to hang for ppc ppc64 ppc64le...
Object Scanning System: Laika BOSS
Laika is an object scanner and intrusion detection system that strives to achieve the following goals: Scalable Work across multiple systems High volume of input from many sources Flexible Modular architecture Highly configurable dispatching and dispositioning logic Tactical code insertion withou...
Fedora Update for zeromq FEDORA-2015-8635
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : zeromq (openSUSE-2015-409)
zeromq was updated to fix one security issue and two non-security bugs. The following vulnerabilities were fixed : - CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bugs were fixed : - boo912460: avoid curve test to hang for ppc ppc64...
libzmq Security Bypass Vulnerability
libzmq also known as ZeroMQ/C++ is a ZeroMQ lightweight messaging kernel core library. A security bypass vulnerability exists in libzmq. A remote attacker can exploit this vulnerability to perform a degradation attack via the ZMTP 2 and prior protocol headers to bypass the security mechanisms of...
Fedora 22 : zeromq-4.0.5-3.fc22 (2015-8635)
Cherry-pick a fix for the protocol downgrade attack CVE-2014-9721 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 22 Update: zeromq-4.0.5-3.fc22
The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering...
openSUSE Security Update : zeromq (openSUSE-SU-2014:1493-1)
zeromq was updated to version 4.0.5 to fix two security issues and various other bugs. These security issues were fixed : - Did not validate the other party's security handshake properly, allowing a man-in-the-middle downgrade attack CVE-2014-7202. - Did not implement a uniqueness check on...
openSUSE Security Update : zeromq (openSUSE-SU-2014:1381-1)
This udpate for zeromq fixes the following non-security and security-issues: Update to version 4.0.4, for a detailed description see /usr/share/doc/packages/zeromq-devel/NEWS - Add libsodium dep for testsuite where possible - Version bump to 4.0.5 fixes bnc898917 CVE-2014-7202 and CVE-2014-7203 :...
zeromq: Man-in-the-middle downgrade and replay attack
CVE-2014-7202 downgrade attack A bug in streamengine.cpp allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. - CVE-2014-7203 replay attack libzmq did not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks...
CVE-2014-7203
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...