Buffer Overflow Vulnerability in ZeroMQ Server by iMatix Corporation

CVE-2021-20235

What is CVE-2021-20235?

A flaw in the ZeroMQ server's decoder static allocator allows for a buffer overflow vulnerability. This occurs when the static buffer size remains unchanged but can be manipulated by an attacker sending a malicious request. If CURVE/ZAP authentication is not enabled, a remote, unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary writes to the buffer, risking application availability and compromising both data integrity and confidentiality.

References