Lucene search

MitreCVE-2011-3263

HistoryAug 19, 2011 - 9:55 p.m.

CVE-2011-3263

2011-08-1921:55:02

CWE-399

mitre

web.nvd.nist.gov

security

vulnerability

cve-2011-3263

zabbix

denial of service

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

65.1%

JSON

zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.

Affected configurations

Nvd

Node

zabbixzabbixRange≤1.8.5

zabbixzabbixMatch1.1

zabbixzabbixMatch1.1beta10

zabbixzabbixMatch1.1beta11

zabbixzabbixMatch1.1beta12

zabbixzabbixMatch1.1beta2

zabbixzabbixMatch1.1beta3

zabbixzabbixMatch1.1beta4

zabbixzabbixMatch1.1beta5

zabbixzabbixMatch1.1beta6

zabbixzabbixMatch1.1beta7

zabbixzabbixMatch1.1beta8

zabbixzabbixMatch1.1beta9

zabbixzabbixMatch1.1.1

zabbixzabbixMatch1.1.2

zabbixzabbixMatch1.1.3

zabbixzabbixMatch1.1.4

zabbixzabbixMatch1.1.5

zabbixzabbixMatch1.1.6

zabbixzabbixMatch1.1.7

zabbixzabbixMatch1.3beta

zabbixzabbixMatch1.3.1beta

zabbixzabbixMatch1.3.2beta

zabbixzabbixMatch1.3.3beta

zabbixzabbixMatch1.3.4beta

zabbixzabbixMatch1.3.5beta

zabbixzabbixMatch1.3.6beta

zabbixzabbixMatch1.3.7beta

zabbixzabbixMatch1.3.8beta

zabbixzabbixMatch1.4.2

zabbixzabbixMatch1.4.3

zabbixzabbixMatch1.4.4

zabbixzabbixMatch1.4.5

zabbixzabbixMatch1.4.6

zabbixzabbixMatch1.5beta

zabbixzabbixMatch1.5.1beta

zabbixzabbixMatch1.5.2beta

zabbixzabbixMatch1.5.3beta

zabbixzabbixMatch1.5.4beta

zabbixzabbixMatch1.6

zabbixzabbixMatch1.6.1

zabbixzabbixMatch1.6.2

zabbixzabbixMatch1.6.3

zabbixzabbixMatch1.6.4

zabbixzabbixMatch1.6.5

zabbixzabbixMatch1.6.6

zabbixzabbixMatch1.6.7

zabbixzabbixMatch1.6.8

zabbixzabbixMatch1.6.9

zabbixzabbixMatch1.7

zabbixzabbixMatch1.7.1

zabbixzabbixMatch1.7.2

zabbixzabbixMatch1.7.3

zabbixzabbixMatch1.7.4

zabbixzabbixMatch1.8

zabbixzabbixMatch1.8.1

zabbixzabbixMatch1.8.2

zabbixzabbixMatch1.8.3

zabbixzabbixMatch1.8.3rc1

zabbixzabbixMatch1.8.3rc2

zabbixzabbixMatch1.8.3rc3

zabbixzabbixMatch1.8.4

zabbixzabbixMatch1.8.4rc1

zabbixzabbixMatch1.8.4rc2

zabbixzabbixMatch1.8.4rc3

zabbixzabbixMatch1.8.4rc4

zabbixzabbixMatch1.8.5rc1

Node

zabbixzabbixMatch1.9.0alpha

zabbixzabbixMatch1.9.1alpha

zabbixzabbixMatch1.9.2alpha

zabbixzabbixMatch1.9.3alpha

VendorProductVersionCPE
zabbixzabbix1.8.2cpe:/a:zabbix:zabbix:1.8.2:::
zabbixzabbix1.3.3cpe:/a:zabbix:zabbix:1.3.3:beta::
zabbixzabbix1.3.6cpe:/a:zabbix:zabbix:1.3.6:beta::
zabbixzabbix1.3cpe:/a:zabbix:zabbix:1.3:beta::
zabbixzabbix1.8.3cpe:/a:zabbix:zabbix:1.8.3:rc3::
zabbixzabbix1.1.7cpe:/a:zabbix:zabbix:1.1.7:::
zabbixzabbix1.5.1cpe:/a:zabbix:zabbix:1.5.1:beta::
zabbixzabbix1.3.2cpe:/a:zabbix:zabbix:1.3.2:beta::
zabbixzabbix1.8.5cpe:/a:zabbix:zabbix:1.8.5:rc1::
zabbixzabbix1.5.3cpe:/a:zabbix:zabbix:1.5.3:beta::

Vendor	Product	Version	CPE
zabbix	zabbix	1.8.2	cpe:/a:zabbix:zabbix:1.8.2:::
zabbix	zabbix	1.3.3	cpe:/a:zabbix:zabbix:1.3.3:beta::
zabbix	zabbix	1.3.6	cpe:/a:zabbix:zabbix:1.3.6:beta::
zabbix	zabbix	1.3	cpe:/a:zabbix:zabbix:1.3:beta::
zabbix	zabbix	1.8.3	cpe:/a:zabbix:zabbix:1.8.3:rc3::
zabbix	zabbix	1.1.7	cpe:/a:zabbix:zabbix:1.1.7:::
zabbix	zabbix	1.5.1	cpe:/a:zabbix:zabbix:1.5.1:beta::
zabbix	zabbix	1.3.2	cpe:/a:zabbix:zabbix:1.3.2:beta::
zabbix	zabbix	1.8.5	cpe:/a:zabbix:zabbix:1.8.5:rc1::
zabbix	zabbix	1.5.3	cpe:/a:zabbix:zabbix:1.5.3:beta::