Unscored CVE-2018-1000832 EUVD-2018-2024GHSA-5h2c-x34m-pf7p

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confident…

Published Dec 20, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Package: zoneminder Package: zoneminder Ecosystem: Debian Ecosystem: Ubuntu

Description

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	zoneminder	1.32.3-2	—
Debian 13	zoneminder	1.32.3-2	—
Debian 12	zoneminder	1.32.3-2	—

Ubuntu