CVE-2024-42333

LOW

Zabbix 6.0.0-6.0.33 - Buffer Over-read in Email Media Type Handling

Title source: llm
STIX 2.1

Description

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

References (2)

Core 2

Scores

CVSS v3 2.7
EPSS 0.0060
EPSS Percentile 43.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-126
Status published
Products (1)
zabbix/zabbix 6.0.0 - 6.0.34
Published Nov 27, 2024
Tracked Since Feb 18, 2026