Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-20234

Опубликовано: 01 апр. 2021
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

4.3.4-1
esm-apps/bionic

released

4.2.5-1ubuntu0.2+esm2
esm-apps/focal

released

4.3.2-2ubuntu1.20.04.1~esm2
esm-apps/jammy

not-affected

4.3.4-1
esm-apps/noble

not-affected

4.3.4-1
esm-apps/xenial

released

4.1.4-7ubuntu0.1+esm2
esm-infra-legacy/trusty

released

4.0.4+dfsg-2ubuntu0.1+esm3
focal

ignored

end of standard support, was needed
groovy

ignored

end of life

Показывать по

EPSS

Процентиль: 63%
0.00452
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
больше 5 лет назад

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
nvd
почти 5 лет назад

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
debian
почти 5 лет назад

An uncontrolled resource consumption (memory leak) flaw was found in t ...

CVSS3: 6.5
github
больше 3 лет назад

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
fstec
почти 5 лет назад

Уязвимость библиотеки для обмена сообщениями ZeroMQ, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 63%
0.00452
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3