CVE-2019-13132

CVE-2019-13132 concerns ZeroMQ libzmq: a remote, unauthenticated client connecting to a libzmq app with a CURVE-enabled listening socket can trigger a stack/buffer overflow in the library, for libzmq versions up to just before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2. Public servers runn...

CVE-2020-15166

CVE-2020-15166 affects ZeroMQ (libzmq) up to 4.3.3. The vulnerability arises when a remote, unauthenticated client connects to a CURVE/ZAP-protected endpoint before the handshake completes, allowing a denial-of-service where legitimate clients cannot exchange messages, though handshakes complete....

CVE-2021-20234

CVE-2021-20234 is a memory-leak/ uncontrolled resource consumption flaw in the ZeroMQ client before 4.3.3 (src/pipe.cpp). It can cause a client that connects to multiple malicious or compromised servers to crash, impacting availability. Affected: ZeroMQ client library (libzmq) prior to 4.3.3. Exp...