Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-29451

Fixed in a distro release EPSS <1%CVSS 4.7

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

Published 2023-07-13 · CVE record · OSV

Products: Zabbix

Distro releases

ReleasePackageFixed in
Debian:10zabbix1:4.0.4+dfsg-1+deb10u2
Debian:12zabbixno fix
Debian:13zabbix1:6.0.23+dfsg-1
Debian:14zabbix1:6.0.23+dfsg-1