cbcvebase.
CVE-2023-29451
published 2023-07-13

CVE-2023-29451: Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.78%
52.3th percentile
Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianzabbix< zabbix 1:6.0.23+dfsg-1 (forky)zabbix 1:6.0.23+dfsg-1 (forky)
zabbixzabbix<= 6.0.14—
zabbixzabbix——
zabbixzabbix>= 0 < 1:6.0.23+dfsg-11:6.0.23+dfsg-1
zabbixzabbix>= 0 < 1:6.0.23+dfsg-11:6.0.23+dfsg-1
zabbixzabbix6.0 – 6.0.14—
zabbixzabbix6.2 – 6.2.8—
zabbixzabbix6.4 – 6.4.0—
zabbixzabbix6.4.2 – 6.4.4—
zabbixzabbix7.0.0alpha1 – 7.0.0alpha1—

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian4.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.