LI
Product
Libzmq
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Libzmq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-36400 | 9.8 | Jul 1 | ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235 Affected: 4.3.3 |
| CVE-2019-13132 | 9.8 | Jul 10 | In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening… Affected: before 4.0.9; 4.1.0 before 4.1.7; 4.2.0 before 4.3.2 |
| CVE-2019-6250 | 8.8 | Jan 13 | A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1 Affected: 4.2.0 through 4.2.5; 4.3.0 before 4.3.1 |
| CVE-2021-20235 | 8.1 | Apr 1 | There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp Affected: 4.2.0 before 4.3.3 |
| CVE-2021-20237 | 7.5 | May 28 | An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3 Affected: 4.2.0 before 4.3.3 |
| CVE-2020-15166 | 7.5 | Sep 11 | In ZeroMQ before version 4.3.3, there is a denial-of-service vulnerability Affected: before 4.3.3 |
| CVE-2021-20234 | 6.5 | Apr 1 | An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp Affected: before 4.3.3 |
Showing 7
