CVE-2024-42333

LOW EPSS 44.9%

Published Nov 27, 20241y ago · Modified Jun 17, 20261w ago

2.7 CVSS 3.1

Low

Published Nov 27, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

Base Score

2.7

Exploitability

1.2

Impact

1.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity None

Availability None

EPSS Exploit Probability

44.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

CWE-126

Vendor	Product	Version	Range
zabbix	zabbix	*	≥6.0.0 – <6.0.34
zabbix	zabbix	*	≥6.4.0 – <6.4.19
zabbix	zabbix	*	≥7.0.0 – <7.0.4

lists.debian.org https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html
support.zabbix.com https://support.zabbix.com/browse/ZBX-25629

Vendor Advisory

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.