CVE-2024-45700 DoS vulnerability due to uncontrolled resource exhaustion
An attacker can crash the Zabbix server by sending crafted requests that cause excessive memory and CPU usage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-45700?
CVE-2024-45700 is a medium-severity denial of service vulnerability in Zabbix Zabbix, published on 2 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading to a service crash.
Weakness: CWE-770
Which versions are affected by CVE-2024-45700?
It affects 1 product.
Products include Zabbix Zabbix.
How do I fix CVE-2024-45700?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-45700 being exploited?
There is no known exploitation of CVE-2024-45700 in the wild and no public exploit code.
Other vulnerabilities in Zabbix Zabbix
Sources
Also known as DEBIAN-CVE-2024-45700, GHSA-8w8h-m7f2-m6c4, UBUNTU-CVE-2024-45700.