Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-32728

Fixed in a distro release EPSS <1%CVSS 4.6

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.

Published 2023-12-18 · CVE record · OSV

Products: Zabbix

Distro releases

ReleasePackageFixed in
Debian 12zabbixno fix
Debian 13zabbix1:6.0.24+dfsg-1
Debian 14zabbix1:6.0.24+dfsg-1
Ubuntu Pro 22.04 LTSzabbixno fix