CVE-2024-36468: Stack buffer overflow in zbx_snmp_cache_handle_engineid
The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to localrecord.engineid without proper bounds checking.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/zabbixto a version that resolves this vulnerability.Fixed in 1:7.0.3+dfsg-1 - Upgrade
Upgrade
debian/zabbixto a version that resolves this vulnerability.Fixed in 1:6.0.14+dfsg-1Fixed in 1:7.0.22+dfsg-1~deb13u1Fixed in 1:7.0.29+dfsg-2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36468?
CVE-2024-36468 has a high severity rating due to the stack buffer overflow that could lead to remote code execution.
How do I fix CVE-2024-36468?
To fix CVE-2024-36468, update your Zabbix Server or Proxy to the latest version that includes patches for this vulnerability.
What are the potential impacts of CVE-2024-36468?
CVE-2024-36468 can allow attackers to execute arbitrary code on the affected systems, compromising their integrity and confidentiality.
Which versions of Zabbix are affected by CVE-2024-36468?
CVE-2024-36468 affects all versions of Zabbix Server and Proxy prior to the patch release that addresses this vulnerability.
Is there a workaround for CVE-2024-36468?
Currently, a specific workaround for CVE-2024-36468 is not recommended, so it is best to apply the necessary updates as soon as they are available.