CVE-2023-32726

CVE-2023-32726 · Possible buffer overread from reading DNS responses

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

CVSS 3.9 · Low · EPSS 0.7% · Fix available

Affected products and versions

zabbix
Versions
- ≥ 5.0.0, ≤ 5.0.39: Affected; ≥ 5.0.40: Not affected (git)
- ≥ 6.0.0, ≤ 6.0.23: Affected; ≥ 6.0.24: Not affected (git)
- ≥ 6.4.0, ≤ 6.4.8: Affected; ≥ 6.4.9: Not affected (git)
- ≥ 7.0.0alpha1, ≤ 7.0.0alpha7: Affected; ≥ 7.0.0alpha8: Not affected (git)
Update to 5.0.40; Update to 6.0.24; Update to 6.4.9; Update to 7.0.0alpha8
zabbix Debian:12
Versions
- 1:6.0.14+dfsg-1
- 1:6.0.23+dfsg-1
- 1:6.0.23+dfsg-1~bpo12+1
- 1:6.0.24+dfsg-1
- 1:6.0.25+dfsg-1
- 1:6.0.29+dfsg-1
- 1:7.0.0+dfsg-1
- 1:7.0.0+dfsg-2
- 1:7.0.0+dfsg-2~bpo12+1
- 1:7.0.1+dfsg-1
- 1:7.0.1+dfsg-1~bpo12+1
- 1:7.0.10+dfsg-1
- 1:7.0.10+dfsg-2
- 1:7.0.2+dfsg-1
- 1:7.0.2+dfsg-1~bpo12+1
- 1:7.0.22+dfsg-1
- 1:7.0.22+dfsg-1.1
- 1:7.0.22+dfsg-1~bpo13+1
- 1:7.0.22+dfsg-1~deb13u1
- 1:7.0.27+dfsg-1
- 1:7.0.29+dfsg-1
- 1:7.0.29+dfsg-2
- 1:7.0.29+dfsg-2~bpo13+1
- 1:7.0.3+dfsg-1
- 1:7.0.5+dfsg-1
- 1:7.0.5+dfsg-1~bpo12+1
- 1:7.0.6+dfsg-1
- 1:7.0.9+dfsg-1
- 1:7.0.9+dfsg-1~bpo12+1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
zabbix Debian:13
Affected ranges
- ECOSYSTEM: < 1:6.0.24+dfsg-1
Update to 1:6.0.24+dfsg-1
zabbix Debian:14
Affected ranges
- ECOSYSTEM: < 1:6.0.24+dfsg-1
Update to 1:6.0.24+dfsg-1
zabbix Ubuntu:Pro:22.04:LTS
Versions
- 1:5.0.8+dfsg-1build1
- 1:5.0.14+dfsg-1
- 1:5.0.17+dfsg-1
- 1:5.0.17+dfsg-1ubuntu0.1~esm1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published