Vulnerability Bulletins |
DSA-4477 zeromq3 - security update |
|
| Affected software | Debian |
|
Fang-Pen Lin discovered a stack-based buffer-overflow flaw in ZeroMQ, alightweight messaging kernel library. A remote, unauthenticated clientconnecting to an application using the libzmq library, running with asocket listening with CURVE encryption/authentication enabled, can takeadvantage of this flaw to cause a denial of service or the execution ofarbitrary code. More info: https://www.debian.org/security/2019/dsa-4477 |
|