Lucene search

K
redosRedosROS-20240328-05
HistoryMar 28, 2024 - 12:00 a.m.

ROS-20240328-05

2024-03-2800:00:00
redos.red-soft.ru
6
zabbix
monitoring
vulnerability
remote execution
code injection
cookie file
privilege escalation
dns
buffer overflow
security prefixes
input data processing.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

Vulnerability of icmpping function of Zabbix universal monitoring system is related to errors in input data processing.
of input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code

Vulnerability of the smart.disk.get edent of the Zabbix universal monitoring system is related to the injection of malicious code.
malicious code. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code

Vulnerability of zbx_session cookie file of Zabbix universal monitoring system is related to incorrect processing of security prefixes.
handling of security prefixes in cookie names. Exploitation of the vulnerability could allow
an attacker acting remotely to escalate his privileges

A vulnerability in the DNS Response Handler component of the Zabbix Universal Monitoring System agent is related to
insufficient checking of exceptional states. Exploitation of the vulnerability could allow an attacker,
acting remotely to cause a buffer overflow

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64zabbix-server-mysql<= 6.4.9-3UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%