Vulnerability record · CVE-2019-6250 · published 13 January 2019
CVE-2019-6250: Zeromq libzmq integer overflow vulnerability
Zeromq · Libzmq
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leveraged to run arbitrary code on the target system. The memory layout allows the attacker to inject OS commands into a data structure located immediately after the problematic buffer (i.e., it is not necessary to use a typical buffer-overflow exploitation technique that changes the flow of control).
Description
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leveraged to run arbitrary code on the target system. The memory layout allows the attacker to inject OS commands into a data structure located immediately after the problematic buffer (i.e., it is not necessary to use a typical buffer-overflow exploitation technique that changes the flow of control).
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/zeromq/libzmq/issues/3351 | ExploitPatchThird Party Advisory |
| https://github.com/zeromq/libzmq/releases/tag/v4.3.1 | Third Party Advisory |
| https://security.gentoo.org/glsa/201903-22 | Third Party Advisory |
| https://www.debian.org/security/2019/dsa-4368 | Third Party Advisory |
| https://github.com/zeromq/libzmq/issues/3351 | ExploitPatchThird Party Advisory |
| https://github.com/zeromq/libzmq/releases/tag/v4.3.1 | Third Party Advisory |
| https://security.gentoo.org/glsa/201903-22 | Third Party Advisory |
| https://www.debian.org/security/2019/dsa-4368 | Third Party Advisory |
Track CVE-2019-6250 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2019-6250), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
