Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.0%
CVSS Severity
CVSS v3 Score 3.0
Products affected by CVE-2024-36468
  • Zabbix » Zabbix » Version: 7.0.0
    cpe:2.3:a:zabbix:zabbix:7.0.0
  • Zabbix » Zabbix » Version: 7.0.1
    cpe:2.3:a:zabbix:zabbix:7.0.1
  • Zabbix » Zabbix » Version: 7.0.2
    cpe:2.3:a:zabbix:zabbix:7.0.2


Contact Us

Shodan ® - All rights reserved