zeromq3: security bypass
| Package(s): | zeromq3 | CVE #(s): | CVE-2014-9721 | ||||||||||||
| Created: | May 11, 2015 | Updated: | June 11, 2015 | ||||||||||||
| Description: | From the Debian advisory:
It was discovered that libzmq, a lightweight messaging kernel, is susceptible to a protocol downgrade attack on sockets using the ZMTP v3 protocol. This could allow remote attackers to bypass ZMTP v3 security mechanisms by sending ZMTP v2 or earlier headers. | ||||||||||||||
| Alerts: |
| ||||||||||||||