Non évaluée
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, runnin...
CVE-2019-13132
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2019-13132 zeromq Corrigé dans: 4.3.2-r0
- Debian DEBIAN-CVE-2019-13132 zeromq3 Corrigé dans: 4.3.1-5
Description d'origine La description telle que publiée par la source (souvent en anglais).
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations.
Références
- advisory openwall.com
- advisory securityfocus.com
- advisory github.com
- advisory github.com
- advisory lists.debian.org
- advisory seclists.org
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- advisory debian.org
- web lists.opensuse.org
- web fangpenlin.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web news.ycombinator.com