Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-8526

Высокий

ALT-PU-2023-8526: package zabbix update to version 6.0.16-alt1

Источник
errata.altlinux.org
Дата публикации
04.05.2023
Дата обновления
04.05.2023
Устраненные уязвимости
4

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades zabbix to version 6.0.16-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

CVSS3: 7.5
nvd
больше 3 лет назад

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

CVSS3: 7.5
debian
больше 3 лет назад

Specially crafted string can cause a buffer overrun in the JSON parser ...

CVSS3: 7.5
ubuntu
больше 3 лет назад

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.

CVSS3: 7.5
nvd
больше 3 лет назад

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.