CVE Vulnerabilities

CVE-2014-7203

Published: Oct 08, 2014 | Modified: Sep 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
5.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V3
Ubuntu
MEDIUM

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Zeromq Zeromq 4.0.0 (including) 4.0.0 (including)
Zeromq Zeromq 4.0.1 (including) 4.0.1 (including)
Zeromq Zeromq 4.0.2 (including) 4.0.2 (including)
Zeromq Zeromq 4.0.3 (including) 4.0.3 (including)
Zeromq Zeromq 4.0.4 (including) 4.0.4 (including)
Zeromq Ubuntu precise *
Zeromq Ubuntu utopic *
Zeromq Ubuntu vivid *
Zeromq Ubuntu wily *
Zeromq3 Ubuntu trusty *
Zeromq3 Ubuntu utopic *

References