← Back

CVE-2023-29451

nvd nist
Published: Jul 13, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

Affected (12)

Products: Zabbix: Zabbix
Zabbix
1 product
Zabbix
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Zabbix
Zabbix
Up to 6.0.14
Zabbix
From 6.4.2 to 6.4.4
Zabbix
Version 6.4.0 alpha1
Zabbix
Version 6.4.0 beta1
Zabbix
Version 6.4.0 beta2
Zabbix
Version 6.4.0 beta3
Zabbix
Version 6.4.0 beta4
Zabbix
Version 6.4.0 beta5
Zabbix
Version 6.4.0 beta6
Zabbix
Version 6.4.0 rc2
Zabbix
Version 6.4.0 rc3
Zabbix
Version 6.4.0 rc4

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: security@zabbix.com
Source: security@zabbix.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.