kritisch
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software a ...
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD.
Beschreibung
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.17 | zoneminder | 1.36.33-r0 |
| alpine 3.18 | zoneminder | 1.36.33-r0 |
| alpine 3.19 | zoneminder | 1.36.33-r0 |
| alpine 3.20 | zoneminder | 1.36.33-r0 |
| alpine 3.21 | zoneminder | 1.36.33-r0 |
| alpine 3.22 | zoneminder | 1.36.33-r0 |
| alpine 3.23 | zoneminder | 1.36.33-r0 |
| alpine 3.24 | zoneminder | 1.36.33-r0 |
| alpine edge | zoneminder | 1.36.33-r0 |
| debian 11 | zoneminder | kein Fix angegeben |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
Alle 17 Einträge aus 17 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.17 | zoneminder | 1.36.33-r0 |
| alpine 3.18 | zoneminder | 1.36.33-r0 |
| alpine 3.19 | zoneminder | 1.36.33-r0 |
| alpine 3.20 | zoneminder | 1.36.33-r0 |
| alpine 3.21 | zoneminder | 1.36.33-r0 |
| alpine 3.22 | zoneminder | 1.36.33-r0 |
| alpine 3.23 | zoneminder | 1.36.33-r0 |
| alpine 3.24 | zoneminder | 1.36.33-r0 |
| alpine edge | zoneminder | 1.36.33-r0 |
| debian 11 | zoneminder | kein Fix angegeben |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
| debian 14 | zoneminder | 1.36.33+dfsg1-1 |
| echo | zoneminder | 1.36.33+dfsg1-1 |
| rapidfort ubuntu 20.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 22.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 24.04 | zoneminder | 0:1.36.33+dfsg1-1 |