CVE-2023-32726
Publication date 18 December 2023
Last updated 24 July 2024
Ubuntu priority
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| zabbix | 24.10 oracular |
Not affected
|
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal |
Not affected
|
|
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty |
Not affected
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
8.1 · High
|
| Attack vector | Network |
| Attack complexity | High |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |