Bug 2356827 (CVE-2024-45700) - CVE-2024-45700 zabbix: DoS vulnerability due to uncontrolled resource exhaustion
Summary: CVE-2024-45700 zabbix: DoS vulnerability due to uncontrolled resource exhaustion
Keywords:
Status: NEW
Alias: CVE-2024-45700
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2356871 2356872 2356873 2356874 2356875 2356876
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-02 07:01 UTC by OSIDB Bzimport
Modified: 2025-04-02 09:18 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-02 07:01:26 UTC
Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading to a service crash.


Note You need to log in before you can comment on or make changes to this bug.