Vulnerability Details : CVE-2024-42333
The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
Products affected by CVE-2024-42333
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2024-42333
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-42333
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.7
|
LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
N/A
|
N/A
|
Zabbix | 2024-11-27 |
|
2.7
|
LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
1.2
|
1.4
|
Zabbix | 2024-11-27 |
CWE ids for CVE-2024-42333
-
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Assigned by:
- 72de3e22-0555-4a0d-ae81-9249e0f0a1e8 (Primary)
- security@zabbix.com (Secondary)
References for CVE-2024-42333
-
https://support.zabbix.com/browse/ZBX-25629
[ZBX-25629] Heap buffer over-read in str_base64_encode_rfc2047 (CVE-2024-42333) - ZABBIX SUPPORT
Jump to