Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1785-1

Опубликовано: 09 июл. 2019
Источник: suse-cvrf

Описание

Security update for zeromq

This update for zeromq fixes the following issues:

  • CVE-2019-13132: An unauthenticated remote attacker could have exploited a stack overflow vulnerability on a server that is supposed to be protected by encryption and authentication to potentially gain a remote code execution. (bsc#1140255)

Список пакетов

Image SLES12-SP5-Azure-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-Azure-HPC-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-Azure-SAP-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-EC2-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-EC2-SAP-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-GCE-BYOS
libzmq3-4.0.4-15.3.1
Image SLES12-SP5-GCE-SAP-BYOS
libzmq3-4.0.4-15.3.1
SUSE Enterprise Storage 4
libzmq3-4.0.4-15.3.1
SUSE Enterprise Storage 5
libzmq3-4.0.4-15.3.1
SUSE Linux Enterprise Desktop 12 SP4
libzmq3-4.0.4-15.3.1
SUSE Linux Enterprise Module for Advanced Systems Management 12
libzmq3-4.0.4-15.3.1
SUSE Linux Enterprise Point of Sale 12 SP2
libzmq3-4.0.4-15.3.1
SUSE Linux Enterprise Software Development Kit 12 SP4
libzmq3-4.0.4-15.3.1
zeromq-devel-4.0.4-15.3.1
SUSE Linux Enterprise Workstation Extension 12 SP4
libzmq3-4.0.4-15.3.1
SUSE Manager Client Tools 12
libzmq3-4.0.4-15.3.1
SUSE Manager Proxy 3.2
libzmq3-4.0.4-15.3.1
SUSE Manager Server 3.2
libzmq3-4.0.4-15.3.1

Ссылки

Описание

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:libzmq3-4.0.4-15.3.1
Image SLES12-SP5-Azure-HPC-BYOS:libzmq3-4.0.4-15.3.1
Image SLES12-SP5-Azure-SAP-BYOS:libzmq3-4.0.4-15.3.1
Image SLES12-SP5-EC2-BYOS:libzmq3-4.0.4-15.3.1
Ссылки