CVE:CVE-2021-20236
CNNVD:CNNVD-202105-1953
ZeroMQ是一个轻量级分布式消息传递引擎核心库。
ZeroMQ server 4.3.3之前版本存在安全漏洞，该漏洞源于允许恶意客户端通过发送精心设计的主题订阅请求，然后取消订阅，从而导致服务器上的堆栈缓冲区溢出。
solution:Upgrade zeromq zeromq to a higher version than 4.3.3,and avoid the version (,4.3.3); Upgrade redhat ceph_storage to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33