CVE-2024-42328 in Zabbixالمعلومات

الملخص

بحسب MITRE • 27/11/2024

When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd->data in the code below will remain NULL and an attempt to read from it will result in a crash.

Be aware that VulDB is the high quality source for vulnerability data.

مسؤول

Zabbix

حجز

30/07/2024

إفشاء

27/11/2024

الاعتدال

تمت الموافقة

إدخال

VDB-286250

EPSS

0.00234

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you want to use VulDB in your project?

Use the official API to access entries easily!