CVE-2023-29458
Fixed in a distro release EPSS <1%CVSS 5.9
Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.
Products: Zabbix
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | zabbix | 1:5.0.44+dfsg-1+deb11u1 |
| Debian 12 | zabbix | no fix |
| Debian 13 | zabbix | 1:6.0.23+dfsg-1 |
| Debian 14 | zabbix | 1:6.0.23+dfsg-1 |
| Ubuntu 25.10 | zabbix | no fix |
| Ubuntu 26.04 LTS | zabbix | no fix |
| Ubuntu 26.10 | zabbix | no fix |
| Ubuntu Pro 22.04 LTS | zabbix | no fix |