PT-2014-7835 · Zeromq · Libzmq

Steamraven · Published 2014-10-08 · Updated 2024-06-15 · CVE-2014-7203

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions libzmq versions 4.0.x through 4.0.4

Description The issue allows man-in-the-middle attackers to conduct replay attacks due to the lack of unique nonces.

Recommendations For libzmq versions 4.0.x through 4.0.4, update to version 4.0.5 or later to ensure nonces are unique and prevent replay attacks.

Fix

Related Identifiers

CVE-2014-7203

OPENSUSE-SU-2024:10038-1

SUSE-FU-2022:0444-1

SUSE-FU-2022:0445-1

Affected Products

Libzmq

References · 20

• https://cve.org/CVERecord?id=CVE-2014-7203 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-7203 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10038-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7203 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7203 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-7203 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-7203 · Security Note
• https://ubuntu.com/security/CVE-2014-7203 · Vendor Advisory
• https://github.com/zeromq/libzmq/pull/1189 · Note
• https://github.com/zeromq/libzmq/issues/1191 · Note
• http://seclists.org/oss-sec/2014/q3/754 · Note
• http://securityfocus.com/bid/70157 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96242 · Note