NVD

Id
34636  
Name
CVE-2014-7202  
Description
stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-08  
Modified Date
2017-01-06  
Seq
2014-7202  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178569 34636 CVE-2014-7202 openSUSE-SU-2014:1381  View
178570 34636 CVE-2014-7202 openSUSE-SU-2014:1493  View
178571 34636 CVE-2014-7202 [oss-security] 20140926 CVE request: zeromq  View
178572 34636 CVE-2014-7202 [oss-security] 20140927 Re: CVE request: zeromq  View
178573 34636 CVE-2014-7202 62262  View
178574 34636 CVE-2014-7202 70157  View
178575 34636 CVE-2014-7202 zeromq-handshake-sec-bypass(96241)  View
178576 34636 CVE-2014-7202 https://github.com/zeromq/libzmq/issues/1190  View
178577 34636 CVE-2014-7202 https://github.com/zeromq/libzmq/pull/1188  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15746 JVNDB-2014-004621 libzmq の stream_engine.cpp におけるダウングレード攻撃を実行される脆弱性 libzmq (別名 ZeroMQ/C++) の stream_engine.cpp には、ダウングレード攻撃を実行される脆弱性が存在します。 CVE-2014-7202 74494 CVE-2014-7202 34636 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004621.html 2014-09-20 2014-10-10 View