CVE-2014-9721
Fixed in a distro release EPSS 3%
libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.
Products: zeromq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zeromq3 | 4.0.5+dfsg-3 |
| Debian 13 | zeromq3 | 4.0.5+dfsg-3 |
| Debian 14 | zeromq3 | 4.0.5+dfsg-3 |
| Debian 8 | zeromq3 | 4.0.5+dfsg-2+deb8u1 |
| SUSE Enterprise Storage 1.0 | zeromq | 4.0.4-13.1 |
| SUSE Linux Enterprise Desktop 12 | zeromq | 4.0.4-13.1 |
| SUSE Linux Enterprise Software Development Kit 12 | zeromq | 4.0.4-13.1 |
| SUSE Linux Enterprise Workstation Extension 12 | zeromq | 4.0.4-13.1 |
| Ubuntu 14.04 LTS | zeromq3 | 4.0.4+dfsg-2ubuntu0.1 |
| openSUSE Tumbleweed | zeromq | 4.2.0-1.1 |