CVE-2023-32726

Possible buffer overread from reading DNS responses

State: Published
Severity: 3.9 Low
Published: Dec 18, 2023
Updated: Nov 3, 2025
Reserved: May 11, 2023

Description

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

Scores

CVSS	Score	Vector	Source
3.1	3.9 Low	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L	Zabbix

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
ZabbixZabbix	5.0.0 through 5.0.39Affectedfrom 5.0.40Not affected 6.0.0 through 6.0.23Affectedfrom 6.0.24Not affected 6.4.0 through 6.4.8Affectedfrom 6.4.9Not affected 7.0.0alpha1 through 7.0.0alpha7Affectedfrom 7.0.0alpha8Not affected

References

https://support.zabbix.com/browse/ZBX-23855
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMFKNV5E4LG2DIZNPRWQ2ENH75H6UEQT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BYSYLA7VTHR25CBLYO5ZLEJFGU7HTHQB/
https://lists.debian.org/debian-lts-announce/2024/01/msg00012.html
https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.