Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2023-29451

Denial of service caused by a bug in the JSON parser

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: affected

  • 6.0 to ≤ 6.0.14affected
  • 6.2 to ≤ 6.2.8affected
  • 6.4 to ≤ 6.4.0affected
  • 7.0.0alpha1 to ≤ 7.0.0alpha1affected

References