libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.

zeromq was updated to fix one security issue and one non-security bug.

The following vulnerability was fixed :

  - CVE-2014-9721: zeromq protocol downgrade attack on     sockets using the ZMTP v3 protocol (boo#931978)

The following bug was fixed :

  - boo#912460: avoid curve test to hang for ppc ppc64     ppc64le architectures

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

zeromq was updated to fix one security issue and two non-security bugs.

The following vulnerabilities were fixed :

  - CVE-2014-9721: zeromq protocol downgrade attack on     sockets using the ZMTP v3 protocol (boo#931978)

The following bugs were fixed :

  - boo#912460: avoid curve test to hang for ppc ppc64     ppc64le architectures

  - boo#907584: zeromq package could not be updated due to a     file conflict, split tools into a separate subpackage

Pieter Hintjens reports :

It is easy to bypass the security mechanism in 4.1.0 and 4.0.5 by sending a ZMTP v2 or earlier header. The library accepts such connections without applying its security mechanism.

Cherry-pick a fix for the protocol downgrade attack (CVE-2014-9721)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libzmq, a lightweight messaging kernel, is susceptible to a protocol downgrade attack on sockets using the ZMTP v3 protocol. This could allow remote attackers to bypass ZMTP v3 security mechanisms by sending ZMTP v2 or earlier headers.

ID	Name	Product	Family	Severity
85870	SUSE SLED12 Security Update : zeromq (SUSE-SU-2015:1510-1)	Nessus	SuSE Local Security Checks	medium
84106	openSUSE Security Update : zeromq (openSUSE-2015-409)	Nessus	SuSE Local Security Checks	medium
84104	FreeBSD : libzmq4 -- V3 protocol handler vulnerable to downgrade attacks (10a6d0aa-0b1c-11e5-bb90-002590263bf5)	Nessus	FreeBSD Local Security Checks	medium
83928	Fedora 22 : zeromq-4.0.5-3.fc22 (2015-8635)	Nessus	Fedora Local Security Checks	medium
83335	Debian DSA-3255-1 : zeromq3 - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-9721

high

Tenable Plugins

medium

medium

medium

medium

medium