1. Home
  2. CVE Database
  3. CVE-2024-42329
LOW · 3.3

CVE-2024-42329

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error descript...

Vulnerability Description

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd->error will be NULL and trying to read from it will result in a crash.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
ZabbixZabbix>= 7.0.0, < 7.0.4

Related Weaknesses (CWE)

CWE-690CWE-476

References

FAQ

What is CVE-2024-42329?

CVE-2024-42329 is a vulnerability with a CVSS score of 3.3 (LOW). The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error descript...

How severe is CVE-2024-42329?

CVE-2024-42329 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42329?

Check the references section above for vendor advisories and patch information. Affected products include: Zabbix Zabbix.