CVE-2021-20237

Name of the Vulnerable Software and Affected Versions ZeroMQ versions prior to 4.3.3

Description An uncontrolled resource consumption flaw, also known as a memory leak, was found in ZeroMQ's src/xpub.cpp. This issue allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highest threat from this issue is to system availability.

Recommendations For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue. As a temporary workaround, consider disabling the CURVE/ZAP authentication or restricting access to the server to minimize the risk of exploitation.