JS - Crash on empty HTTP server response (CVE-2024-42328)

XMLWordPrintable

    • Type: Defect (Security)
    • Resolution: Fixed
    • Priority: Trivial
    • 7.0.4rc1
    • Affects Version/s: None
    • Component/s: Server (S)
    • None

      When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data.

            Assignee:
            Zabbix Support Team
            Reporter:
            Vjaceslavs Bogdanovs
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: