CVE-2014-7202
Fixed in a distro release EPSS 2%
stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.
Products: zeromq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zeromq3 | 4.0.5+dfsg-1 |
| Debian 13 | zeromq3 | 4.0.5+dfsg-1 |
| Debian 14 | zeromq3 | 4.0.5+dfsg-1 |
| Ubuntu 14.04 LTS | zeromq3 | 4.0.4+dfsg-2ubuntu0.1 |
| openSUSE Tumbleweed | zeromq | 4.2.0-1.1 |