CVE-2011-3263: Medium severity zabbix server vulnerability
Published Aug 19, 2011
·Updated
zabbixagentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.
Affected Software
71 affected components
Zabbix Zabbix=1.6.1
Zabbix Zabbix=1.1-beta2
Zabbix Zabbix=1.1.2
Zabbix Zabbix=1.8.4-rc3
Zabbix Zabbix=1.7.4
Zabbix Zabbix=1.5.3-beta
Zabbix Zabbix=1.1.4
Zabbix Zabbix=1.1.6
Zabbix Zabbix=1.8.3-rc1
Zabbix Zabbix=1.4.3
Zabbix Zabbix=1.8.4-rc1
Zabbix Zabbix=1.6.5
Zabbix Zabbix=1.4.6
Zabbix Zabbix=1.6.8
Zabbix Zabbix=1.1-beta4
Zabbix Zabbix=1.7.1
Zabbix Zabbix=1.4.4
Zabbix Zabbix=1.5.1-beta
Zabbix Zabbix=1.1
Zabbix Zabbix=1.3.7-beta
Zabbix Zabbix=1.8.4-rc4
Zabbix Zabbix=1.7.2
Zabbix Zabbix=1.8
Zabbix Zabbix=1.8.3-rc2
Zabbix Zabbix=1.6.3
Zabbix Zabbix=1.1-beta3
Zabbix Zabbix=1.3.1-beta
Zabbix Zabbix=1.3.2-beta
Zabbix Zabbix=1.6.2
Zabbix Zabbix=1.8.3-rc3
Zabbix Zabbix=1.7
Zabbix Zabbix=1.3.5-beta
Zabbix Zabbix=1.1.7
Zabbix Zabbix=1.6
Zabbix Zabbix=1.6.7
Zabbix Zabbix=1.6.4
Zabbix Zabbix=1.1-beta9
Zabbix Zabbix=1.1-beta10
Zabbix Zabbix=1.3.8-beta
Zabbix Zabbix=1.7.3
Zabbix Zabbix=1.1-beta6
Zabbix Zabbix=1.8.2
Zabbix Zabbix=1.3.6-beta
Zabbix Zabbix=1.5.4-beta
Zabbix Zabbix=1.1.1
Zabbix Zabbix=1.1-beta8
Zabbix Zabbix=1.8.3
Zabbix Zabbix=1.1-beta11
Zabbix Zabbix=1.1-beta7
Zabbix Zabbix=1.1.3
Zabbix Zabbix=1.8.1
Zabbix Zabbix=1.6.6
Zabbix Zabbix=1.6.9
Zabbix Zabbix=1.4.5
Zabbix Zabbix<=1.8.5
Zabbix Zabbix=1.3.4-beta
Zabbix Zabbix=1.1-beta5
Zabbix Zabbix=1.8.4
Zabbix Zabbix=1.5-beta
Zabbix Zabbix=1.4.2
Zabbix Zabbix=1.1-beta12
Zabbix Zabbix=1.8.4-rc2
Zabbix Zabbix=1.1.5
Zabbix Zabbix=1.5.2-beta
Zabbix Zabbix=1.8.5-rc1
Zabbix Zabbix=1.3.3-beta
Zabbix Zabbix=1.3-beta
Zabbix Zabbix=1.9.0-alpha
Zabbix Zabbix=1.9.1-alpha
Zabbix Zabbix=1.9.2-alpha
Zabbix Zabbix=1.9.3-alpha
Remediation
Patch Available
Event History
Aug 19, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3263?
CVE-2011-3263 has a severity rating that indicates it can cause a denial of service due to high CPU consumption.
2
How do I fix CVE-2011-3263?
To fix CVE-2011-3263, upgrade to Zabbix version 1.8.6 or 1.9.4 or later.
3
What kind of attack does CVE-2011-3263 relate to?
CVE-2011-3263 relates to a denial of service attack that can be executed using the vfs.file.cksum command.
4
Which versions of Zabbix are affected by CVE-2011-3263?
CVE-2011-3263 affects Zabbix versions prior to 1.8.6 and the 1.9.x branch before version 1.9.4.
5
Who can exploit CVE-2011-3263?
Context-dependent attackers can exploit CVE-2011-3263 to execute commands that lead to CPU consumption issues.