CVE-2023-32726

EUVD-2023-36953
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.9 LOW
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
ZabbixCNA
3.9 LOW
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
zabbixzabbix-agent
5.0.0 ≤
𝑥
≤ 5.0.39
zabbixzabbix-agent
6.0.0 ≤
𝑥
≤ 6.0.23
zabbixzabbix-agent
6.4.0 ≤
𝑥
≤ 6.4.8
zabbixzabbix-agent
7.0.0:alpha1
zabbixzabbix-agent
7.0.0:alpha6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
zabbix
bookworm
vulnerable
bullseye
vulnerable
bullseye (security)
1:5.0.45+dfsg-1+deb11u1
fixed
sid
1:7.0.6+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
zabbix
bionic
not-affected
focal
not-affected
jammy
needed
lunar
ignored
mantic
ignored
noble
dne
oracular
not-affected
trusty
not-affected
xenial
not-affected