CVE-2024-36468 — Stack buffer overflow in zbx_snmp_cache_handle_engineid

CVE-2024-36468

Stack buffer overflow in zbx_snmp_cache_handle_engineid PUBLISHED

Description (CNA)

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.0.0 through 7.0.2rc1

CWE

CWE-121

References

https://support.zabbix.com/browse/ZBX-25621

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.