CVE-2020-11800
Fixed in a distro release EPSS 9%CVSS 9.0
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
Products: zabbix, opensuse backports_sle, opensuse leap, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zabbix | 1:4.0.0+dfsg-1 |
| Debian 13 | zabbix | 1:4.0.0+dfsg-1 |
| Debian 14 | zabbix | 1:4.0.0+dfsg-1 |
| Debian 9 | zabbix | 1:3.0.31+dfsg-0+deb9u1 |
| SUSE Package Hub 15 SP1 | zabbix | 3.0.31-bp152.2.3.1 |
| SUSE Package Hub 15 SP2 | zabbix | 3.0.31-bp152.2.3.1 |
| Ubuntu Pro 14.04 LTS | zabbix | 1:2.2.2+dfsg-1ubuntu1+esm3 |
| Ubuntu Pro 14.04 LTS | zabbix | 1:2.2.2+dfsg-1ubuntu1+esm4 |
| Ubuntu Pro 16.04 LTS | zabbix | 1:2.4.7+dfsg-2ubuntu2.1+esm2 |
| Ubuntu Pro 16.04 LTS | zabbix | 1:2.4.7+dfsg-2ubuntu2.1+esm3 |
| Ubuntu Pro 18.04 LTS | zabbix | 1:3.0.12+dfsg-1ubuntu0.1~esm2 |
| Ubuntu Pro 18.04 LTS | zabbix | 1:3.0.12+dfsg-1ubuntu0.1~esm3 |
| Ubuntu Pro 20.04 LTS | zabbix | 1:4.0.17+dfsg-1ubuntu0.1~esm1 |
| openSUSE Leap 15.1 | zabbix | 3.0.31-bp152.2.3.1 |
| openSUSE Leap 15.2 | zabbix | 3.0.31-bp152.2.3.1 |