Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | zabbix | 1:4.0.4+dfsg-1+deb10u4 |
Vulnerabilities 3
-
High 8.5
Inefficient permission check in class CControllerAuthenticationUpdate
Request to LDAP is sent before user permissions are checked.
-
High 7.6
Stored XSS in Maps element
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
-
Low 3.9
Possible buffer overread from reading DNS responses
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.