Vulnerability Details CVE-2024-36468
The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.0%
CVSS Severity
CVSS v3 Score 3.0
Products affected by CVE-2024-36468
-
cpe:2.3:a:zabbix:zabbix:7.0.0
-
cpe:2.3:a:zabbix:zabbix:7.0.1
-
cpe:2.3:a:zabbix:zabbix:7.0.2