Lucene search

MitreCVE-2014-7202

HistoryOct 08, 2014 - 7:55 p.m.

CVE-2014-7202

2014-10-0819:55:04

mitre

web.nvd.nist.gov

cve-2014-7202

libzmq

zeromq

nvd

security issue

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

64.5%

JSON

stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.

Affected configurations

Nvd

Node

zeromqzeromqMatch4.0.0

zeromqzeromqMatch4.0.4

VendorProductVersionCPE
zeromqzeromq4.0.0cpe:2.3:a:zeromq:zeromq:4.0.0:*:*:*:*:*:*:*
zeromqzeromq4.0.4cpe:2.3:a:zeromq:zeromq:4.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zeromq	zeromq	4.0.0	cpe:2.3:a:zeromq:zeromq:4.0.0:::::::*
zeromq	zeromq	4.0.4	cpe:2.3:a:zeromq:zeromq:4.0.4:::::::*

References

lists.opensuse.org/opensuse-updates/2014-11/msg00027.html

lists.opensuse.org/opensuse-updates/2014-11/msg00101.html

seclists.org/oss-sec/2014/q3/754

seclists.org/oss-sec/2014/q3/776

secunia.com/advisories/62262

www.securityfocus.com/bid/70157

exchange.xforce.ibmcloud.com/vulnerabilities/96241

github.com/zeromq/libzmq/issues/1190

github.com/zeromq/libzmq/pull/1188

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

64.5%

JSON

Related for CVE-2014-7202