CVE-2009-4500

2022-10-0316:24:04

mitre

www.cve.org

zabbix server vulnerability

process_trap function

denial of service

null pointer dereference

crafted request

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

JSON

The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service (crash) via a crafted request with data that lacks an expected : (colon) separator, which triggers a NULL pointer dereference.