CVE-2023-32726
Fixed in a distro release EPSS <1%CVSS 3.9
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
Products: Zabbix
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | zabbix | 1:4.0.4+dfsg-1+deb10u4 |
| Debian 11 | zabbix | 1:5.0.44+dfsg-1+deb11u1 |
| Debian 12 | zabbix | no fix |
| Debian 13 | zabbix | 1:6.0.24+dfsg-1 |
| Debian 14 | zabbix | 1:6.0.24+dfsg-1 |
| Ubuntu Pro 22.04 LTS | zabbix | no fix |