CVE-2023-26037
ZoneMinder is a free, open source Closed-circuit television software a ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD.
Beschreibung
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly validated and could be used execute arbitrary SQL. This issue is fixed in versions 1.36.33 and 1.37.33.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | zoneminder | kein Fix angegeben |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
| debian 14 | zoneminder | 1.36.33+dfsg1-1 |
| echo | zoneminder | 1.36.33+dfsg1-1 |
| rapidfort alpine 3.20 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.21 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.22 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.23 | zoneminder | 1.37.61-r0 |
| rapidfort alpine 3.24 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort ubuntu 20.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 22.04 | zoneminder | 0:1.36.33+dfsg1-1 |
Alle 13 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | zoneminder | kein Fix angegeben |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
| debian 14 | zoneminder | 1.36.33+dfsg1-1 |
| echo | zoneminder | 1.36.33+dfsg1-1 |
| rapidfort alpine 3.20 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.21 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.22 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort alpine 3.23 | zoneminder | 1.37.61-r0 |
| rapidfort alpine 3.24 | zoneminder | 1.36.35-r1, 1.37.61-r0 |
| rapidfort ubuntu 20.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 22.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 24.04 | zoneminder | 0:1.36.33+dfsg1-1 |