CVE-2024-42333

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-126

Affected software

VendorProductVersions
ZabbixZabbix>= 6.0.0, <= 6.0.33; >= 6.4.0, <= 6.4.18; >= 7.0.0, <= 7.0.3

References

Timeline

Published
Nov 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-423355.47Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-423369.8Servision - CWE-287: Improper AuthenticationCVE-2024-423376.5CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-423384.3CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-423394.3CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-42345.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayful Islam Filterable Portfolio alloCVE-2024-423404.3CyberArk - CWE-602: Client-Side Enforcement of Server-Side SecurityCVE-2024-423416.1Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')CVE-2024-423424.3Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CVE-2024-423437.5Loway - CWE-204: Observable Response DiscrepancyCVE-2024-423445.5A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive inCVE-2024-423454.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly ha
CVE-2024-42333: Low severity, CVSS 2.7 | Vulnix