Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

SUSE: Zabbix Moderate Buffer Overread Fix Vulnerability 2025:02746-1

suse
Calendar Grey August 11, 2025
Scroller Suse
Upgrade Zabbix on SUSE to address critical vulnerabilities such as buffer overflows and implement necessary bug fixes to enhance system reliability.
* bsc#1233791 * bsc#1233834 Cross-References: * CVE-2024-22117

Summary

## This update for zabbix fixes the following issues: * CVE-2024-42333: Fixed buffer over-read for broken UTF8 mail data injection. (bsc#1233834) * CVE-2024-22117: Fixed a bug that can cause the map element to crash when new URLs are added. (bsc#1233791) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2746=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * zabbix-agent-debuginfo-4.0.12-4.32.1 * zabbix-agent-4.0.12-4.32.1 * zabbix-debugsource-4.0.12-4.32.1

Topics%20covered

Topics Covered

security advisory moderate information leak buffer overflow SuSE zabbix

References

* bsc#1233791

* bsc#1233834

Cross-

* CVE-2024-22117

* CVE-2024-42333

CVSS scores:

* CVE-2024-22117 ( SUSE ): 5.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2024-22117 ( SUSE ): 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-22117 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-42333 ( SUSE ): 4.6

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-42333 ( SUSE ): 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

* CVE-2024-42333 ( NVD ): 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected Products:

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

Announcement ID: SUSE-SU-2025:02746-1
Release Date: 2025-08-11T06:20:26Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate information leak buffer overflow SuSE zabbix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.