CVE-2021-20234

MEDIUM

Zeromq Libzmq < 4.3.3 - Memory Leak

Title source: rule

Description

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability.

References (2)

[Issue Tracking, Patch, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=1921972

[Exploit, Patch, Third Party Advisory] https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87

Scores

CVSS v3 6.5

EPSS 0.0045

EPSS Percentile 63.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401 CWE-400

Status published

Affected Products (1)

zeromq/libzmq < 4.3.3

Timeline

Published Apr 01, 2021

Tracked Since Feb 18, 2026