CVE-2024-36468CWE-121

Stack buffer overflow in zbx_snmp_cache_handle_engineid

Low · published November 27, 2024

CVSS v3.1
3.0
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-11-27T12:03Z
EPSS history
Timeline
  • 27 NOV 12:03Z
    Stack buffer overflow in zbx_snmp_cache_handle_engineid
    cvelistv5