| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | ≥ 7.0.0, < 7.0.3 | 7.0.3 |
The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free