Vulnerability · Published Aug 9, 2024 · Assigned by Zabbix
CVE-2024-36462Allocation of resources without limits or throttling (uncontrolled resource consumption)
High 7.5
In plain English
A high-severity resource allocation without limits in Zabbix from Zabbix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls. This can cause a denial-of-service (DoS) attack or degrade the performance of the affected system.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:13 | zabbix | 1:7.0.1+dfsg-1 | DEBIAN-CVE-2024-36462 |
| Debian:14 | zabbix | 1:7.0.1+dfsg-1 | DEBIAN-CVE-2024-36462 |
| Ubuntu:25.10 | zabbix | no fix listed | UBUNTU-CVE-2024-36462 |
| Ubuntu:26.04:LTS | zabbix | no fix listed | UBUNTU-CVE-2024-36462 |
| Ubuntu:26.10 | zabbix | no fix listed | UBUNTU-CVE-2024-36462 |
Affected products (as reported)
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H