Astra Linux - уязвимость в zabbix

The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...

The vulnerability of the webdriver_session_query function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the webdriversessionquery function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service Attack...