Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29451

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

Published

2023-07-13T10:15:09.137

Last Modified

2024-11-21T07:57:04.990

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zabbix zabbix ≤ 6.0.14 Yes
Application zabbix zabbix ≤ 6.4.4 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
Application zabbix zabbix 6.4.0 Yes
References