Linux Distros Unpatched Vulnerability : CVE-2022-23132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During Zabbix installation from RPM, DACOVERRIDE SELinux capability is in use to access PID files in /var/run/zabbix folder. In this case, Zabbix Proxy or Serve...

[SECURITY] [DLA 3909-1] zabbix security update

Debian LTS Advisory DLA-3909-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 03, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:5.0.44+dfsg-1+deb11u1 CVE ID : CVE-2022-23132 CVE-2022-23133 CVE-2022-24349 CVE-2022-24917 CVE-2022-24918...

CVE-2022-23132

CVE-2022-23132 affects Zabbix Proxy/Server componentsWhen installed from RPM, DAC_OVERRIDE SELinux capability is used to access /var/run/zabbix PID files, allowing the processes to bypass traditional file read/write/execute permission checks on the filesystem. This vulnerability could enable unau...