CVE-2017-2824
24.05.2017, 14:29
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.
| Vendor | Product | Version |
|---|---|---|
| zabbix | zabbix | 2.4.0 |
| zabbix | zabbix | 2.4.0:rc1 |
| zabbix | zabbix | 2.4.0:rc2 |
| zabbix | zabbix | 2.4.0:rc3 |
| zabbix | zabbix | 2.4.1 |
| zabbix | zabbix | 2.4.1:rc1 |
| zabbix | zabbix | 2.4.1:rc2 |
| zabbix | zabbix | 2.4.2 |
| zabbix | zabbix | 2.4.2:rc1 |
| zabbix | zabbix | 2.4.3 |
| zabbix | zabbix | 2.4.3:rc1 |
| zabbix | zabbix | 2.4.4 |
| zabbix | zabbix | 2.4.4:rc1 |
| zabbix | zabbix | 2.4.5 |
| zabbix | zabbix | 2.4.5:rc1 |
| zabbix | zabbix | 2.4.6 |
| zabbix | zabbix | 2.4.6:rc1 |
| zabbix | zabbix | 2.4.7 |
| zabbix | zabbix | 2.4.7:rc1 |
| zabbix | zabbix | 2.4.8 |
| zabbix | zabbix | 2.4.8:rc1 |
| zabbix | zabbix | 2.4.9 |
| zabbix | zabbix | 2.4.9:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| zabbix |
|
References