CVE-2023-32726

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.9 LOW
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
ZabbixCNA
3.9 LOW
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
VendorProductVersion
zabbixzabbix-agent
5.0.0 ≤
𝑥
≤ 5.0.39
zabbixzabbix-agent
6.0.0 ≤
𝑥
≤ 6.0.23
zabbixzabbix-agent
6.4.0 ≤
𝑥
≤ 6.4.8
zabbixzabbix-agent
7.0.0:alpha1
zabbixzabbix-agent
7.0.0:alpha6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
zabbix
bullseye
vulnerable
bullseye (security)
1:5.0.45+dfsg-1+deb11u1
fixed
bookworm
vulnerable
sid
1:7.0.6+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
zabbix
oracular
not-affected
noble
dne
mantic
ignored
lunar
ignored
jammy
needed
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected