Read the docs

Zabbix

Records145All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9

Exploited now

Zabbix records in CISA KEV
TI-2022-07300 Zabbix Frontend Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2022-02-22TI-2022-07303 Zabbix Frontend Improper Access Control Vulnerability Priority HIGH 81KEV 2022-02-22

Components

Products in the NVD configurations · select one to filter the records
Zabbix 115 records CRITICAL Frontend 13 records HIGH Zabbix-agent2 4 records MEDIUM Zabbix Server 2 records MEDIUM Web Service Report Generation 1 record MEDIUM Zabbix-agent 1 record LOW Zabbix Agentd 1 record LOW

Records

1 record in Zabbix-agent · all components

TI-2023-15995 CVE-2023-32726 · GHSA-fqr7-2x83-wf2r

Possible buffer overread from reading DNS responses

Priority LOW 36

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00673 Published 2023-12-18 No fix listed CWE-754
Open these records in search →