Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Debian: DSA-3937-1 Critical: Zabbix Code Execution Risk

debian
Calendar Grey August 12, 2017
Debian Logo
Buffer overflows and data insertions in Zabbix present vulnerabilities; apply the patch immediately following directive DSA-3937-1.
Lilith Wyatt discovered two vulnerabilities in the Zabbix network monitoring system which may result in execution of arbitrary code or database writes by malicious proxies
Topics%20covered

Topics Covered

security advisory code execution network monitoring debian arbitrary code zabbix malicious proxies

Summary

Lilith Wyatt discovered two vulnerabilities in the Zabbix network
monitoring system which may result in execution of arbitrary code or
database writes by malicious proxies.

For the oldstable distribution (jessie), these problems have been fixed
in version 1:2.2.7+dfsg-2+deb8u3.

For the stable distribution (stretch), these problems have been fixed
prior to the initial release.

We recommend that you upgrade your zabbix packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: zabbix
CVE ID: CVE-2017-2824 CVE-2017-2825

Topics%20covered

Topics Covered

security advisory code execution network monitoring debian arbitrary code zabbix malicious proxies

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.