[ GLSA 201908-17 ] ZeroMQ

[GLSA]

Gentoo Linux Security Advisory

Title: ZeroMQ: Arbitrary code execution (GLSA 201908-17)
Severity: high
Exploitable: remote
Date: 2019-08-15
Bug(s): #689426
ID: 201908-17

Synopsis

A vulnerability in ZeroMQ might allow an attacker to execute
arbitrary code.


Background

Looks like an embeddable networking library but acts like a concurrency
framework.


Affected Packages

Package: net-libs/zeromq
Vulnerable: < 4.3.2
Unaffected: >= 4.3.2
Architectures: All supported architectures


Description

A buffer overflow was discovered in ZeroMQ.

Impact

An attacker could possibly execute arbitrary code with the privileges of
the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All ZeroMQ users should upgrade to the latest version: