Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-36461
HistoryAug 12, 2024 - 1:38 p.m.

CVE-2024-36461

2024-08-1213:38:22
Alpine Linux Development Team
security.alpinelinux.org
4
zabbix security
memory modification
javascript engine
unix

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.5%

Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchzabbix= 6.4.15-r2UNKNOWN

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.5%