CVE-2023-32728
Fixed in a distro release EPSS <1%CVSS 4.6
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.
Products: Zabbix
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zabbix | no fix |
| Debian 13 | zabbix | 1:6.0.24+dfsg-1 |
| Debian 14 | zabbix | 1:6.0.24+dfsg-1 |
| Ubuntu Pro 22.04 LTS | zabbix | no fix |