CVE-2007-0640 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Zabbix

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
0.9%
top 23.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ZabbixDebian Zabbix
Timeline
PublishedJan 31
Latest updateMay 1

Description

Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP addresses."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶debiandebian/zabbix< zabbix 1:1.1.4-8 (bookworm)
▶Debianzabbix/zabbix< 1:1.1.4-8+3
▶NVDzabbix/zabbix1.1.4+2

Patches

Patch: www.securityfocus.com ↗Patch: www.zabbix.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c3fc-hggh-m873: Buffer overflow in ZABBIX before 1↗2022-05-01
▶
OSV
CVE-2007-0640: Buffer overflow in ZABBIX before 1↗2007-01-31
▶

📋Vendor Advisories

1
Debian
CVE-2007-0640: zabbix - Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors rel...↗2007
▶