CVE-2024-42332 New line injection in Zabbix SNMP traps
Attackers can inject forged data into the Zabbix UI via crafted SNMP traps if SNMP authentication is disabled or credentials are known.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-42332?
CVE-2024-42332 is a low-severity vulnerability in Zabbix Zabbix, published on 27 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host.
Weakness: CWE-116
Which versions are affected by CVE-2024-42332?
It affects 1 product.
Products include Zabbix Zabbix.
How do I fix CVE-2024-42332?
Apply the vendor's patch.
Is CVE-2024-42332 being exploited?
There is no known exploitation of CVE-2024-42332 in the wild and no public exploit code.
Other vulnerabilities in Zabbix Zabbix
Sources
Also known as DEBIAN-CVE-2024-42332, GHSA-phjj-9p2g-26h9, UBUNTU-CVE-2024-42332.