CVE-2023-32724 — Incorrect Permission Assignment in Zabbix

CWE-732 — Incorrect Permission Assignment4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.7%
top 27.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ZabbixDebian Zabbix
Timeline
PublishedOct 12

Description

Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory access and manipulation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/zabbix< zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)
▶Debianzabbix/zabbix< 1:5.0.44+dfsg-1+deb11u1+2
▶CVEListV5zabbix/zabbix7.0.0alpha1 — 7.0.0alpha3
▶NVDzabbix/zabbix5.0.0 — 5.0.36+3

🔴Vulnerability Details

2
GHSA
GHSA-w5wv-98xr-mhmx: Memory pointer is in a property of the Ducktape object↗2023-10-12
▶
OSV
CVE-2023-32724: Memory pointer is in a property of the Ducktape object↗2023-10-12
▶

📋Vendor Advisories

1
Debian
CVE-2023-32724: zabbix - Memory pointer is in a property of the Ducktape object. This leads to multiple v...↗2023
▶