Summary
It was discovered that ZeroMQ incorrectly handled certain application metadata.
A remote attacker could use this issue to cause ZeroMQ to crash, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | zeromq3 | 4.1.4-7ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | zeromq3 | 4.2.5-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting …
References
-
report
https://ubuntu.com/security/CVE-2019-13132