Intrusion PreventionZeroMQ.libzmq.v2_decoder.Integer.Overflow
Description
This indicates an attack attempt to exploit an Integer Overflow vulnerability in ZeroMQ.
A remote attacker can exploit this vulnerability by sending a crafted ZMTP 2.0 message to the target server. Successful exploitation could result in the execution of arbitrary code under the security context of the application.
Affected Products
System Compromise: Remote attackers can gain control of vulnerable systems
Impact
ZeroMQ libzmq prior to 4.3.1
Recommended Actions
Refer to the vendor's advisory for updates:
https://github.com/zeromq/libzmq/releases/tag/v4.3.1
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-05-23 | 14.619 | Default_action:pass:drop |
| 2019-03-05 | 14.565 | Sig Added |
| 2019-02-06 | 14.543 |
| ID | 47386 |
| Created | Feb 06, 2019 |
| Updated | May 22, 2019 |
| Risk |
|
| CVE ID | CVE-2019-6250 |
| Exploit Prediction Score | 63.84% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |