CVE-2024-36468

Name

CVE-2024-36468

Description

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

CPE URI	Source package	Min version	Max version
	zabbix	>= 7.0.0	<= 7.0.2rc1
`cpe:2.3:a:zabbix:zabbix::::::::`	zabbix	>= 7.0.0	< 7.0.3

References

Match rules

Vulnerable and fixed packages