CVE-2023-32726

published 2023-12-18

CVE-2023-32726: The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

Priority P3 43 high 8.1 CVSS 3.1

AV N AC H PR N UI N S U C H I H A H

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	zabbix	< zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)	zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)
zabbix	zabbix	>= 0 < 1:5.0.44+dfsg-1+deb11u1	1:5.0.44+dfsg-1+deb11u1
zabbix	zabbix	>= 0 < 1:6.0.24+dfsg-1	1:6.0.24+dfsg-1
zabbix	zabbix	>= 0 < 1:6.0.24+dfsg-1	1:6.0.24+dfsg-1
zabbix	zabbix	5.0.0 – 5.0.39	—
zabbix	zabbix	6.0.0 – 6.0.23	—
zabbix	zabbix	6.4.0 – 6.4.8	—
zabbix	zabbix	7.0.0alpha1 – 7.0.0alpha7	—
zabbix	zabbix-agent	—	—
zabbix	zabbix-agent	5.0.0 – 5.0.39	—
zabbix	zabbix-agent	6.0.0 – 6.0.23	—
zabbix	zabbix-agent	6.4.0 – 6.4.8	—

CVSS provenance

nvd v3.1 8.1 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

osv 8.1 HIGH

vendor_debian 3.9 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-754