The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
{ "binaries": [ { "binary_name": "zabbix-agent", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-frontend-php", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-java-gateway", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-proxy-mysql", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-proxy-pgsql", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-proxy-sqlite3", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-server-mysql", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" }, { "binary_name": "zabbix-server-pgsql", "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5" } ] }
{ "binaries": [ { "binary_name": "zabbix-agent", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-frontend-php", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-java-gateway", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-proxy-mysql", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-proxy-pgsql", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-proxy-sqlite3", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-server-mysql", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" }, { "binary_name": "zabbix-server-pgsql", "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4" } ] }
{ "binaries": [ { "binary_name": "zabbix-agent", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-frontend-php", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-java-gateway", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-proxy-mysql", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-proxy-pgsql", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-proxy-sqlite3", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-server-mysql", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" }, { "binary_name": "zabbix-server-pgsql", "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4" } ] }
{ "binaries": [ { "binary_name": "zabbix-agent", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-frontend-php", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-java-gateway", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-proxy-mysql", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-proxy-pgsql", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-proxy-sqlite3", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-server-mysql", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" }, { "binary_name": "zabbix-server-pgsql", "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2" } ] }
{ "binaries": [ { "binary_name": "zabbix-agent", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-frontend-php", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-java-gateway", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-proxy-mysql", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-proxy-pgsql", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-proxy-sqlite3", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-server-mysql", "binary_version": "1:5.0.17+dfsg-1" }, { "binary_name": "zabbix-server-pgsql", "binary_version": "1:5.0.17+dfsg-1" } ] }