ZeroHour

CVE-2021-20234

PoC
CVSS 3.1
6.5 medium
EPSS
1%p63
Published
()
Modified
Description

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

Vendors
zeromq
Products
libzmq
Weakness
CWE-400, CWE-401
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.