Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2024-45700

DoS vulnerability due to uncontrolled resource exhaustion

Description

Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading to a service crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unaffected

  • 6.0.0 to ≤ 6.0.38affected
  • 7.0.0 to ≤ 7.0.9affected
  • 7.2.0 to ≤ 7.2.3affected
  • 7.4.0alpha1unaffected

References