crítica
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software a ...
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD.
Descripción
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.17 | zoneminder | 1.36.33-r0 |
| alpine 3.18 | zoneminder | 1.36.33-r0 |
| alpine 3.19 | zoneminder | 1.36.33-r0 |
| alpine 3.20 | zoneminder | 1.36.33-r0 |
| alpine 3.21 | zoneminder | 1.36.33-r0 |
| alpine 3.22 | zoneminder | 1.36.33-r0 |
| alpine 3.23 | zoneminder | 1.36.33-r0 |
| alpine 3.24 | zoneminder | 1.36.33-r0 |
| alpine edge | zoneminder | 1.36.33-r0 |
| debian 11 | zoneminder | sin corrección indicada |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
Mostrar las 17 entradas de 17 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.17 | zoneminder | 1.36.33-r0 |
| alpine 3.18 | zoneminder | 1.36.33-r0 |
| alpine 3.19 | zoneminder | 1.36.33-r0 |
| alpine 3.20 | zoneminder | 1.36.33-r0 |
| alpine 3.21 | zoneminder | 1.36.33-r0 |
| alpine 3.22 | zoneminder | 1.36.33-r0 |
| alpine 3.23 | zoneminder | 1.36.33-r0 |
| alpine 3.24 | zoneminder | 1.36.33-r0 |
| alpine edge | zoneminder | 1.36.33-r0 |
| debian 11 | zoneminder | sin corrección indicada |
| debian 12 | zoneminder | 1.36.33+dfsg1-1 |
| debian 13 | zoneminder | 1.36.33+dfsg1-1 |
| debian 14 | zoneminder | 1.36.33+dfsg1-1 |
| echo | zoneminder | 1.36.33+dfsg1-1 |
| rapidfort ubuntu 20.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 22.04 | zoneminder | 0:1.36.33+dfsg1-1 |
| rapidfort ubuntu 24.04 | zoneminder | 0:1.36.33+dfsg1-1 |