CVE-2014-7203

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-08 · updated 2026-06-17

Description

libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.

Affected products

Zeromq: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4

References

http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html
http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html
http://seclists.org/oss-sec/2014/q3/754
http://seclists.org/oss-sec/2014/q3/776
http://secunia.com/advisories/62262
http://www.securityfocus.com/bid/70157
https://exchange.xforce.ibmcloud.com/vulnerabilities/96242
https://github.com/zeromq/libzmq/issues/1191
https://github.com/zeromq/libzmq/pull/1189
http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html
http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html
http://seclists.org/oss-sec/2014/q3/754

Get alerted when CVE-2014-7203 or the next vulnerability affects your stack