TI-2021-03531 CVE-2021-20236 · GHSA-4j25-p3vq-p264
Buffer overflow in zeromq
Priority MEDIUM 46
A flaw was found in the ZeroMQ server in versions before 4.3.3.
zeromq
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
zeromq records in CISA KEVNo zeromq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Zeromq · all components
TI-2014-07905 CVE-2014-9721 · GHSA-cx82-pq93-6p39
libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade…
Priority LOW 25
libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.
TI-2014-06003 CVE-2014-7203 · GHSA-56m5-7cj8-j73q
libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which…
Priority LOW 24
libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.
TI-2014-06002 CVE-2014-7202 · GHSA-4jwc-wmvr-fwp2
stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle…
Priority LOW 24
stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.