Security Advisory

CVE-2021-20237

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-28 10:42:23

Last updated 2024-08-03 17:37:22

Assigner redhat

State PUBLISHED

Description

An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQs src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highest threat from this vulnerability is to system availability.

← Browse all CVEs View on cve.org ↗