CVE-2024-42333 Heap buffer over-read
An attacker can leak small amounts of Zabbix Server memory via an out-of-bounds read in the email library, potentially exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-42333?
CVE-2024-42333 is a low-severity vulnerability in Zabbix Zabbix, published on 27 Nov 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
Weakness: CWE-126
Which versions are affected by CVE-2024-42333?
It affects 1 product.
Products include Zabbix Zabbix.
How do I fix CVE-2024-42333?
Apply the vendor's patch.
Is CVE-2024-42333 being exploited?
There is no known exploitation of CVE-2024-42333 in the wild and no public exploit code.
Other vulnerabilities in Zabbix Zabbix
Sources
Also known as DEBIAN-CVE-2024-42333, GHSA-jm5w-96w4-8pcq, UBUNTU-CVE-2024-42333.