The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c
{ "binaries": [ { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-agent" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm5", "binary_name": "zabbix-server-pgsql" } ] }
{ "binaries": [ { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-agent" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:2.4.7+dfsg-2ubuntu2.1+esm4", "binary_name": "zabbix-server-pgsql" } ] }
{ "binaries": [ { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-agent" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm4", "binary_name": "zabbix-server-pgsql" } ] }
{ "binaries": [ { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-agent" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:4.0.17+dfsg-1ubuntu0.1~esm2", "binary_name": "zabbix-server-pgsql" } ] }
{ "binaries": [ { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-agent" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:5.0.17+dfsg-1", "binary_name": "zabbix-server-pgsql" } ] }