VDB

GCVE-110-MAGEIA-2020-367

GCVE-110-MAGEIA-2020-367
Advisory Published
Vulnetix · Advisory published September 15, 2020
If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them (CVE-2020-15166). Also, the cppzmq package has been rebuilt against the updated zeromq library.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiacppzmq4.3.0-2.2.mga7 (unaffected), 0 (affected)—
Mageiazeromq0 (affected), 4.3.3-1.1.mga7 (unaffected)—

Aliases

CVE-2020-15166

References

Updated zeromq packages fix security vulnerability
advisory
Updated zeromq packages fix security vulnerability
issue
Updated zeromq packages fix security vulnerability
issue

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›