CVE-2019-6250 Integer overflow in n/a
An authenticated attacker can exploit an integer overflow in ZeroMQ to overwrite memory and execute arbitrary code on the target system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-6250?
CVE-2019-6250 is a high-severity vulnerability in Debian Debian Linux, published on 13 Jan 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leveraged to run arbitrary code on the target system. The memory layout allows the attacker to inject OS commands into a data structure located immediately after the problematic buffer (i.e., it is not necessary to use a typical buffer-overflow exploitation technique that changes the flow of control).
Weakness: CWE-190
Which versions are affected by CVE-2019-6250?
It affects 2 products.
Linux distribution packages (2)
zeromq SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 4.2.3-3.3.2 |
python-pyzmq openSUSE:Tumbleweed | All versions | 27.1.0-3.1 |
Products include Debian Debian Linux, Zeromq Libzmq.
How do I fix CVE-2019-6250?
Upgrade to a fixed version.
Is CVE-2019-6250 being exploited?
There is no known exploitation of CVE-2019-6250 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2019-6250, DEBIAN-CVE-2019-6250, DSA-4368-1, GHSA-383h-xx34-hq84, MGASA-2019-0054, SUSE-SU-2019:0110-1 and 5 more.