Vulnerability Description
zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zabbix | Zabbix | <= 1.8.5 |
Related Weaknesses (CWE)
References
- http://www.zabbix.com/rn1.8.6.phpPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69378
- https://support.zabbix.com/browse/ZBX-3794Exploit
- http://www.zabbix.com/rn1.8.6.phpPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69378
- https://support.zabbix.com/browse/ZBX-3794Exploit
FAQ
What is CVE-2011-3263?
CVE-2011-3263 is a vulnerability with a CVSS score of 5.0 (MEDIUM). zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special devi...
How severe is CVE-2011-3263?
CVE-2011-3263 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-3263?
Check the references section above for vendor advisories and patch information. Affected products include: Zabbix Zabbix.