CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
65.1%
zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.
Vendor | Product | Version | CPE |
---|---|---|---|
zabbix | zabbix | 1.8.2 | cpe:/a:zabbix:zabbix:1.8.2::: |
zabbix | zabbix | 1.3.3 | cpe:/a:zabbix:zabbix:1.3.3:beta:: |
zabbix | zabbix | 1.3.6 | cpe:/a:zabbix:zabbix:1.3.6:beta:: |
zabbix | zabbix | 1.3 | cpe:/a:zabbix:zabbix:1.3:beta:: |
zabbix | zabbix | 1.8.3 | cpe:/a:zabbix:zabbix:1.8.3:rc3:: |
zabbix | zabbix | 1.1.7 | cpe:/a:zabbix:zabbix:1.1.7::: |
zabbix | zabbix | 1.5.1 | cpe:/a:zabbix:zabbix:1.5.1:beta:: |
zabbix | zabbix | 1.3.2 | cpe:/a:zabbix:zabbix:1.3.2:beta:: |
zabbix | zabbix | 1.8.5 | cpe:/a:zabbix:zabbix:1.8.5:rc1:: |
zabbix | zabbix | 1.5.3 | cpe:/a:zabbix:zabbix:1.5.3:beta:: |