CVE-2014-7203

Опубликовано: 20 сент. 2014

Источник: redhat

CVSS2: 5.8

EPSS Низкий

Описание

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

Отчет

This issue did not affect the versions of zeromq as shipped with Inktank Ceph Enterprise 1.2 and 1.3.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-323

https://bugzilla.redhat.com/show_bug.cgi?id=1147315zeromq: CurveZMQ does not mandate replay attack detection

EPSS

Процентиль: 77%

0.019

Низкий

5.8 Medium

CVSS2

Связанные уязвимости

CVE-2014-7203

ubuntu

почти 12 лет назад

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

CVE-2014-7203

nvd

почти 12 лет назад

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

CVE-2014-7203

debian

почти 12 лет назад

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces ...

GHSA-56m5-7cj8-j73q

github

около 4 лет назад

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

EPSS

Процентиль: 77%

0.019

Низкий

5.8 Medium

CVSS2