Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leveraged to run arbitrary code on the target system. The memory layout allows the attacker to inject OS commands into a data structure located immediately after the problematic buffer (i.e., it is not necessary to use a typical buffer-overflow exploitation technique that changes the flow of control).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZeroMQ libzmq 输入验证错误漏洞
Vulnerability Description
ZeroMQ libzmq（又名0MQ）是一个轻量级分布式消息传递引擎核心库。 ZeroMQ libzmq 4.2.x版本和4.3.1之前的4.3.x版本中的v2_decoder.cpp文件的zmq::v2_decoder_t::size_ready存在安全漏洞。远程攻击者可利用该漏洞覆盖缓冲区边界之外的任意字节，在目标系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A