CVE-2014-3005
published 2018-02-01CVE-2014-3005: XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote…
PriorityP354critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
5.21%
91.6th percentile
XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Affected
52 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | zabbix | < zabbix 1:2.2.5+dfsg-1 (bookworm) | zabbix 1:2.2.5+dfsg-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
| zabbix | zabbix | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
zabbix vulnerabilities
osv·2022-06-15·CVSS 9.8
CVE-2020-11800 [CRITICAL] zabbix vulnerabilities
zabbix vulnerabilities
Fu Chuang discovered that Zabbix did not properly parse IPs. A remote
attacker could possibly use this issue to execute arbitrary code. This
issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.
(CVE-2020-11800)
It was discovered that Zabbix incorrectly handled certain requests. A
remote attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
(CVE-2017-2824, CVE-2017-2825)
It was discovered that Zabbix incorrectly handled certain XML files. A
remote attacker could possibly use this issue to read arbitrary files or
potentially execute arbitrary code. This issue only affected
Ubuntu 14.04 ESM. (CVE-2014-3005)
It was discovered that Zabbix incorrectly handled certain inp
GHSA
GHSA-5xxv-j4hw-gp2p: XML external entity (XXE) vulnerability in Zabbix 1
ghsa_unreviewed·2022-05-14
CVE-2014-3005 [CRITICAL] CWE-611 GHSA-5xxv-j4hw-gp2p: XML external entity (XXE) vulnerability in Zabbix 1
XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
OSV
CVE-2014-3005: XML external entity (XXE) vulnerability in Zabbix 1
osv·2018-02-01·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005: XML external entity (XXE) vulnerability in Zabbix 1
XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Ubuntu
Zabbix vulnerabilities
vendor_ubuntu·2022-06-15·CVSS 9.8
CVE-2016-10742 [CRITICAL] Zabbix vulnerabilities
Title: Zabbix vulnerabilities
Summary: Several security issues were fixed in Zabbix.
Fu Chuang discovered that Zabbix did not properly parse IPs. A remote
attacker could possibly use this issue to execute arbitrary code. This
issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.
(CVE-2020-11800)
It was discovered that Zabbix incorrectly handled certain requests. A
remote attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
(CVE-2017-2824, CVE-2017-2825)
It was discovered that Zabbix incorrectly handled certain XML files. A
remote attacker could possibly use this issue to read arbitrary files or
potentially execute arbitrary code. This issue only affected
Ubuntu 14.04 ESM. (CVE-2014-3005)
Debian
CVE-2014-3005: zabbix - XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x ...
vendor_debian·2014·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005: zabbix - XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x ...
XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Scope: local
bookworm: resolved (fixed in 1:2.2.5+dfsg-1)
bullseye: resolved (fixed in 1:2.2.5+dfsg-1)
forky: resolved (fixed in 1:2.2.5+dfsg-1)
sid: resolved (fixed in 1:2.2.5+dfsg-1)
trixie: resolved (fixed in 1:2.2.5+dfsg-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-7]
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-7]
CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-7 tracking bug for zabbix: see bloc
Bugzilla
CVE-2014-3005 zabbix20: zabbix: local file inclusion via XXE attack [epel-all]
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix20: zabbix: local file inclusion via XXE attack [epel-all]
CVE-2014-3005 zabbix20: zabbix: local file inclusion via XXE attack [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects mul
Bugzilla
CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-6]
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-6]
CVE-2014-3005 zabbix: local file inclusion via XXE attack [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-6 tracking bug for zabbix: see bloc
Bugzilla
CVE-2014-3005 zabbix: local file inclusion via XXE attack
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix: local file inclusion via XXE attack
CVE-2014-3005 zabbix: local file inclusion via XXE attack
It was reported [1],[2] that the Zabbix frontend supported an XML data import feature, where on the server it used DOMDocument to parse the XML. By default, DOMDocument also parses the external DTD, which could allow a remote attacker to use a crafted XML file causing Zabbix to read an arbitrary local file, and send the contents of the specified file to a remote server.
This is fixed upstream via:
* svn://svn.zabbix.com/branches/dev/ZBX-8151-18 r46594 for 1.8
* svn://svn.zabbix.com/branches/dev/ZBX-8151-20 r46600 for 2.0+
[1] https://support.zabbix.com/browse/ZBX-8151
[2] http://www.pnigos.com/?p=273
Discussion:
Created zabbix22 tracking bugs for this issue:
Affects: epel-6 [bug 1110500]
---
Created zabbix tracking bugs for
Bugzilla
CVE-2014-3005 zabbix: local file inclusion via XXE attack [fedora-all]
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix: local file inclusion via XXE attack [fedora-all]
CVE-2014-3005 zabbix: local file inclusion via XXE attack [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects multiple support
Bugzilla
CVE-2014-3005 zabbix22: zabbix: local file inclusion via XXE attack [epel-6]
bugzilla·2014-06-17·CVSS 9.8
CVE-2014-3005 [CRITICAL] CVE-2014-3005 zabbix22: zabbix: local file inclusion via XXE attack [epel-6]
CVE-2014-3005 zabbix22: zabbix: local file inclusion via XXE attack [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-6 tracking bug for zabbix
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.htmlhttp://seclists.org/fulldisclosure/2014/Jun/87http://www.securityfocus.com/bid/68075https://bugzilla.redhat.com/show_bug.cgi?id=1110496https://support.zabbix.com/browse/ZBX-8151https://web.archive.org/web/20140622034155/http://www.pnigos.com:80/?p=273http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.htmlhttp://seclists.org/fulldisclosure/2014/Jun/87http://www.securityfocus.com/bid/68075https://bugzilla.redhat.com/show_bug.cgi?id=1110496https://support.zabbix.com/browse/ZBX-8151https://web.archive.org/web/20140622034155/http://www.pnigos.com:80/?p=273
2018-02-01
Published