EUVD-2014-9527

Malware in sbrugna...

Debian DLA-2588-1 : zeromq3 security update

Two security issues have been detected in zeromq3. CVE-2021-20234 Memory leak in client induced by malicious servers without CURVE/ZAP. From issue description 1. When a pipe processes a delimiter and is already not in active state but still has an unfinished message, the message is leaked...

ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)

An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...

Bypassing Security Mechanisms

libzmq aka ZeroMQ is vulnerable to bypassing security mechanisms or downgrade attacks. The vulnerability exists because ZMTP V3 protocol handler sends ZMTP v2 or earlier headers...

SUSE SLED12 Security Update : zeromq (SUSE-SU-2015:1510-1)

zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed : - boo912460: avoid curve test to hang for ppc ppc64 ppc64l...

Design/Logic Flaw

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

CVE-2014-9721

CVE-2014-9721 affects libzmq (ZeroMQ core library). Affected versions are libzmq before 4.0.6 and 4.1.x before 4.1.1, where a remote attacker can trigger downgrade attacks to bypass the ZMTP v3 protocol security by sending a ZMTP v2 or earlier header. The issue is due to improper handling of olde...

[SECURITY] [DSA 3255-1] zeromq3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3255-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 10, 2015 http://www.debian.org/security/faq -...