USN-4050-1: ZeroMQ vulnerability
It was discovered that ZeroMQ incorrectly handled certain application metadata. A remote attacker could use this issue to cause ZeroMQ to crash, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this ZeroMQ vulnerability?
The vulnerability ID is USN-4050-1.
What is the description of the ZeroMQ vulnerability?
The ZeroMQ vulnerability is caused by an incorrect handling of certain application metadata, which can allow a remote attacker to crash the application or execute arbitrary code.
Which software is affected by the ZeroMQ vulnerability?
The libzmq5 package with versions 4.3.1-3ubuntu2.1, 4.2.5-2ubuntu0.2, 4.2.5-1ubuntu0.2, and 4.1.4-7ubuntu0.1 on Ubuntu 19.04, 18.10, 18.04, and 16.04 respectively.
How can a remote attacker exploit this ZeroMQ vulnerability?
A remote attacker can exploit this vulnerability by sending specially crafted application metadata to the vulnerable system.
How can I fix the ZeroMQ vulnerability?
To fix the ZeroMQ vulnerability, update the libzmq5 package to the following versions: 4.3.1-3ubuntu2.1, 4.2.5-2ubuntu0.2, 4.2.5-1ubuntu0.2, and 4.1.4-7ubuntu0.1 on Ubuntu 19.04, 18.10, 18.04, and 16.04 respectively.