CVE-2024-42333: Zabbix

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

Affected products

• Zabbix Zabbix: from 6.0.0, before 6.0.34 (fixed in 6.0.34); from 6.4.0, before 6.4.19 (fixed in 6.4.19); from 7.0.0, before 7.0.4 (fixed in 7.0.4)

Published 2024-11-27. Last modified 2026-06-17.