CVE-2024-42333 - Vulnerability Details - OpenCVE

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zabbix	Zabbix Zabbix Server

Configuration 1 [-]

OR	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::

No data.

References

Link	Providers
https://support.zabbix.com/browse/ZBX-25629

History

Wed, 08 Oct 2025 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zabbix zabbix
CPEs		cpe:2.3:a:zabbix:zabbix::::::::
Vendors & Products		Zabbix zabbix

Wed, 27 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 27 Nov 2024 12:15:00 +0000

Type	Values Removed	Values Added
Description		The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
Title		Heap buffer over-read
Weaknesses		CWE-126
References		https://support.zabbix.com/browse/ZBX-25629
Metrics		cvssV3_1 `{'score': 2.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: Zabbix

Published: 2024-11-27T12:07:11.159Z

Updated: 2024-11-27T14:54:36.459Z

Reserved: 2024-07-30T08:27:36.132Z

Link: CVE-2024-42333

Vulnrichment

Updated: 2024-11-27T14:54:32.615Z

NVD

Status : Analyzed

Published: 2024-11-27T12:15:21.350

Modified: 2025-10-08T15:26:47.627

Link: CVE-2024-42333

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-42333", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "state": "PUBLISHED", "assignerShortName": "Zabbix", "dateReserved": "2024-07-30T08:27:36.132Z", "datePublished": "2024-11-27T12:07:11.159Z", "dateUpdated": "2024-11-27T14:54:36.459Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Server"], "product": "Zabbix", "repo": "https://git.zabbix.com/", "vendor": "Zabbix", "versions": [{"changes": [{"at": "6.0.34rc1", "status": "unaffected"}], "lessThanOrEqual": "6.0.33", "status": "affected", "version": "6.0.0", "versionType": "git"}, {"changes": [{"at": "6.4.19rc1", "status": "unaffected"}], "lessThanOrEqual": "6.4.18", "status": "affected", "version": "6.4.0", "versionType": "git"}, {"changes": [{"at": "7.0.4rc1", "status": "unaffected"}], "lessThanOrEqual": "7.0.3", "status": "affected", "version": "7.0.0", "versionType": "git"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank chamal for submitting this report on the HackerOne bug bounty platform."}], "datePublic": "2024-10-07T06:37:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c"}], "value": "The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c"}], "impacts": [{"capecId": "CAPEC-679", "descriptions": [{"lang": "en", "value": "CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "CWE-126 Buffer Over-read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2024-11-27T12:07:11.159Z"}, "references": [{"url": "https://support.zabbix.com/browse/ZBX-25629"}], "source": {"discovery": "EXTERNAL"}, "title": "Heap buffer over-read", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-27T14:54:27.245135Z", "id": "CVE-2024-42333", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T14:54:36.459Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-42333", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-27T14:54:27.245135Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T14:54:32.615Z"}}], "cna": {"title": "Heap buffer over-read", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank chamal for submitting this report on the HackerOne bug bounty platform."}], "impacts": [{"capecId": "CAPEC-679", "descriptions": [{"lang": "en", "value": "CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://git.zabbix.com/", "vendor": "Zabbix", "modules": ["Server"], "product": "Zabbix", "versions": [{"status": "affected", "changes": [{"at": "6.0.34rc1", "status": "unaffected"}], "version": "6.0.0", "versionType": "git", "lessThanOrEqual": "6.0.33"}, {"status": "affected", "changes": [{"at": "6.4.19rc1", "status": "unaffected"}], "version": "6.4.0", "versionType": "git", "lessThanOrEqual": "6.4.18"}, {"status": "affected", "changes": [{"at": "7.0.4rc1", "status": "unaffected"}], "version": "7.0.0", "versionType": "git", "lessThanOrEqual": "7.0.3"}], "defaultStatus": "unaffected"}], "datePublic": "2024-10-07T06:37:00.000Z", "references": [{"url": "https://support.zabbix.com/browse/ZBX-25629"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c", "supportingMedia": [{"type": "text/html", "value": "The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-126", "description": "CWE-126 Buffer Over-read"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2024-11-27T12:07:11.159Z"}}}, "cveMetadata": {"cveId": "CVE-2024-42333", "state": "PUBLISHED", "dateUpdated": "2024-11-27T14:54:36.459Z", "dateReserved": "2024-07-30T08:27:36.132Z", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "datePublished": "2024-11-27T12:07:11.159Z", "assignerShortName": "Zabbix"}, "dataVersion": "5.1"}