CVE-2014-9721

Impact:
Important
Public Date:
2014-12-04
Bugzilla:
1221666: CVE-2014-9721 zeromq: protocol downgrade attack on sockets using the ZMTP v3 protocol

The MITRE CVE dictionary describes this issue as:

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.

Find out more about CVE-2014-9721 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.

Base Score 6.1
Base Metrics AV:A/AC:L/Au:N/C:C/I:N/A:N
Access Vector Adjacent Network
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact None
Availability Impact None

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Affected Packages State

Platform Package State
Red Hat Ceph Storage 1.2 zeromq3 Not affected

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact Red Hat Product Security.

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.