PT-2024-9094 · Zabbix+2 · Zabbix Server/Proxy+2
Vjaceslavs Bogdanovs
·
Published
2024-11-27
·
Updated
2024-12-16
·
CVE-2024-36468
CVSS v3.1
8.2
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Zabbix server/proxy (affected versions not specified)
Description:
The issue is a stack buffer overflow in the
zbx snmp cache handle engineid function within the Zabbix server/proxy code. This problem occurs when copying data from session->securityEngineID to local record.engineid without proper bounds checking. The exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Red Os
Zabbix Server/Proxy