DEBIAN-CVE-2024-22116
- Source
- https://security-tracker.debian.org/tracker/CVE-2024-22116
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-22116.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2024-22116
- Upstream
- Downstream
- Published
- 2024-08-12T13:38:15Z
- Modified
- 2026-09-15T09:03:01Z
- Severity
-
- 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.
- References
Affected packages
Debian:12 / zabbix
Package
- Name
- zabbix
- Purl
- pkg:deb/debian/zabbix?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1:6.*
1:6.0.14+dfsg-1
1:6.0.23+dfsg-1~bpo12+1
1:6.0.23+dfsg-1
1:6.0.24+dfsg-1
1:6.0.25+dfsg-1
1:6.0.29+dfsg-1
1:7.*
1:7.0.0+dfsg-1
1:7.0.0+dfsg-2~bpo12+1
1:7.0.0+dfsg-2
1:7.0.1+dfsg-1~bpo12+1
1:7.0.1+dfsg-1
1:7.0.2+dfsg-1~bpo12+1
1:7.0.2+dfsg-1
1:7.0.3+dfsg-1
1:7.0.5+dfsg-1~bpo12+1
1:7.0.5+dfsg-1
1:7.0.6+dfsg-1
1:7.0.9+dfsg-1~bpo12+1
1:7.0.9+dfsg-1
1:7.0.10+dfsg-1
1:7.0.10+dfsg-2
1:7.0.22+dfsg-1~bpo13+1
1:7.0.22+dfsg-1~deb13u1
1:7.0.22+dfsg-1
1:7.0.22+dfsg-1.1
1:7.0.27+dfsg-1
1:7.0.29+dfsg-1
1:7.0.29+dfsg-2
Debian:13 / zabbix
Package
- Name
- zabbix
- Purl
- pkg:deb/debian/zabbix?arch=source&distro=trixie
Debian:14 / zabbix
Package
- Name
- zabbix
- Purl
- pkg:deb/debian/zabbix?arch=source&distro=forky