VULNERABILITY INTELLIGENCE
CVE-2019-13132
CVSS score9.8 CRITICAL
EPSS probability42.46%
CISA KEVNot currently listed
Published2019-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations.
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Mailing List, Release Notes, Third Party Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Release Notes, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Mailing List, Third Party Advisory