A vulnerability in ZeroMQ could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/zeromq | * | < 4.3.3 | >= 4.3.3 |
Looks like an embeddable networking library but acts like a concurrency framework.
It was discovered that ZeroMQ does not properly handle connecting peers before a handshake is completed.
An unauthenticated remote attacker able to connect to a ZeroMQ endpoint, even with CURVE encryption/authentication enabled, can cause a Denial of Service condition.
There is no known workaround at this time.
All ZeroMQ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/zeromq-4.3.3"
A vulnerability in ZeroMQ might allow an attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/zeromq | * | < 4.3.2 | >= 4.3.2 |
Looks like an embeddable networking library but acts like a concurrency framework.
A buffer overflow was discovered in ZeroMQ.
An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All ZeroMQ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/zeromq-4.3.2"
An overflow was discovered in ZeroMQ which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/zeromq | * | < 4.3.1 | >= 4.3.1 |
Looks like an embeddable networking library but acts like a concurrency framework
Please reference the CVE for details.
Please reference the CVE for details.
There is no known workaround at this time.
All ZeroMQ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/zeromq-4.3.1"