CVE-2014-7203: Medium severity zeromq vulnerability
Published Oct 8, 2014
·Updated
libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.
Affected Software
5 affected components
ZeroMQ ZeroMQ=4.0.0
ZeroMQ ZeroMQ=4.0.1
ZeroMQ ZeroMQ=4.0.2
ZeroMQ ZeroMQ=4.0.3
ZeroMQ ZeroMQ=4.0.4
Event History
Oct 8, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7203?
CVE-2014-7203 is classified as a medium severity vulnerability due to its potential to enable replay attacks.
2
How do I fix CVE-2014-7203?
You can fix CVE-2014-7203 by upgrading libzmq (ZeroMQ/C++) to version 4.0.5 or later.
3
What types of attacks are possible with CVE-2014-7203?
CVE-2014-7203 allows man-in-the-middle attackers to conduct replay attacks due to nonces not being unique.
4
Which versions of ZeroMQ are affected by CVE-2014-7203?
ZeroMQ versions 4.0.0 to 4.0.4 are affected by CVE-2014-7203.
5
Is CVE-2014-7203 relevant for all users of ZeroMQ?
CVE-2014-7203 is particularly relevant for users who rely on secure messaging using ZeroMQ, as it compromises message integrity.