CVE-2014-7203
Fixed in a distro release EPSS 2%
libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.
Products: zeromq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zeromq3 | 4.0.5+dfsg-1 |
| Debian 13 | zeromq3 | 4.0.5+dfsg-1 |
| Debian 14 | zeromq3 | 4.0.5+dfsg-1 |
| Ubuntu 14.04 LTS | zeromq3 | 4.0.4+dfsg-2ubuntu0.1 |
| openSUSE Tumbleweed | zeromq | 4.2.0-1.1 |