CVE-2023-32722: Stack-buffer Overflow in library module zbxjson
The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-32722?
CVE-2023-32722 is a vulnerability in the zabbix/src/libs/zbxjson module that allows a buffer overflow when parsing JSON files through zbx_json_open.
Which software versions are affected by CVE-2023-32722?
The affected versions include Zabbix 6.0.0 to 6.0.20, Zabbix 6.4.0 to 6.4.5, Zabbix 7.0.0-alpha1, Zabbix 7.0.0-alpha2, and Zabbix 7.0.0-alpha3.
What is the severity of CVE-2023-32722?
CVE-2023-32722 has a severity rating of 7.8, which is considered critical.
How can I fix CVE-2023-32722?
To fix CVE-2023-32722, users should update their Zabbix software to a version that includes the necessary security patches.
Where can I find more information about CVE-2023-32722?
You can find more information about CVE-2023-32722 on the Zabbix support website at the following link: [ZBX-23390](https://support.zabbix.com/browse/ZBX-23390)