Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-42331

Опубликовано: 27 нояб. 2024
Источник: nvd
CVSS3: 3.3
EPSS Низкий

Описание

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd->browser heap pointer is freed by garbage collection.

EPSS

Процентиль: 16%
0.0005
Низкий

3.3 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.3
ubuntu
7 месяцев назад

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd->browser heap pointer is freed by garbage collection.

CVSS3: 3.3
debian
7 месяцев назад

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method re ...

CVSS3: 3.3
github
7 месяцев назад

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd->browser heap pointer is freed by garbage collection.

CVSS3: 3.3
fstec
7 месяцев назад

Уязвимость сценария src/libs/zbxembed/browser.c универсальной системы мониторинга Zabbix, позволяющая нарушителю вызвать отказ в обслуживании (DoS)

CVSS3: 8.8
redos
6 месяцев назад

Множественные уязвимости zabbix7-lts-server-pgsql

EPSS

Процентиль: 16%
0.0005
Низкий

3.3 Low

CVSS3

Дефекты

CWE-416