CVE-2024-42329 — JS - Crash on unexpected HTTP server response

CVE-2024-42329

JS - Crash on unexpected HTTP server response PUBLISHED

Description (CNA)

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd->error will be NULL and trying to read from it will result in a crash.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.0.0 through 7.0.3rc1

CWE

CWE-690, CWE-476

References

https://support.zabbix.com/browse/ZBX-25625

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.