[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4761-1 zeromq3 -- zeromq3

ID: oval:org.secpod.oval:def:605008Date: (C)2020-09-08   (M)2023-11-13
Class: PATCHFamily: unix




It was discovered that ZeroMQ, a lightweight messaging kernel library does not properly handle connecting peers before a handshake is completed. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket listening with CURVE encryption/authentication enabled can take advantage of this flaw to cause a denial of service affecting authenticated and encrypted clients.

Platform:
Debian 10.x
Product:
libzmq5
libzmq3-dev
Reference:
DSA-4761-1
CVE-2020-15166
CVE    1
CVE-2020-15166

© SecPod Technologies