CVE-2024-42331

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to a use-after-free bug in the Zabbix monitoring system. This bug occurs when the wd->browser heap pointer is freed by garbage collection, potentially allowing an attacker to cause a denial of service (DoS). The bug is associated with the es browser ctor method in the src/libs/zbxembed/browser.c file, which retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is then utilized by the browser push error method in the src/libs/zbxembed/browser error.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.