CVE-2020-11800
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote att ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (hoch).
Beschreibung
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | zabbix | 1:4.0.0+dfsg-1 |
| debian 12 | zabbix | 1:4.0.0+dfsg-1 |
| debian 13 | zabbix | 1:4.0.0+dfsg-1 |
| debian 14 | zabbix | 1:4.0.0+dfsg-1 |
| debian 9 | zabbix | 1:3.0.31+dfsg-0+deb9u1 |
| echo | zabbix | 1:4.0.0+dfsg-1 |
| ubuntu 14.04-ESM | zabbix | 1:2.2.2+dfsg-1ubuntu1+esm3 |
| ubuntu 16.04-ESM | zabbix | 1:2.4.7+dfsg-2ubuntu2.1+esm2 |
| ubuntu 18.04-ESM | zabbix | 1:3.0.12+dfsg-1ubuntu0.1~esm2 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html
- https://git.zabbix.com/projects/ZBX/repos/zabbix/commits/85453e04656fc7bd8a6790f5295d79410101745c
- https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html
- https://support.zabbix.com/browse/DEV-1538
- https://support.zabbix.com/browse/ZBX-17600
- https://support.zabbix.com/browse/ZBXSEC-30
- https://support.zabbix.com/browse/ZBXSEC-30%20%28not%20public%29
- https://ubuntu.com/security/notices/USN-4767-1