CVE-2024-42326: Use after free vulnerability in browser.c
Published Nov 27, 2024
·Updated
There was discovered a use after free bug in browser.c in the esbrowsergetvariant function
Affected Software
1 affected component
Zabbix Zabbix>=7.0.0<7.0.3
Event History
Nov 27, 2024
CVE Published
via MITRE·12:03 PM
Data Sourced
via MITRE·12:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-42326?
CVE-2024-42326 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2024-42326?
To fix CVE-2024-42326, update to Zabbix version 7.0.4 or later.
3
What software is affected by CVE-2024-42326?
CVE-2024-42326 affects Zabbix versions from 7.0.0 up to 7.0.3.
4
What does CVE-2024-42326 refer to specifically?
CVE-2024-42326 refers to a use after free bug in the es_browser_get_variant function in the Zabbix software.
5
Is there a workaround for CVE-2024-42326?
Currently, there is no known workaround for CVE-2024-42326; updating is recommended.