[ZBX-18884] In web.page.get no size restrictions on the input domain name Created: 2021 Jan 04  Updated: 2024 Apr 10  Resolved: 2021 Jan 18

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G), Proxy (P), Server (S)
Affects Version/s: None
Fix Version/s: 4.0.28rc1, 5.0.8rc1, 5.2.4rc1, 5.4.0alpha1, 5.4 (plan)

Type: Problem report Priority: Trivial
Reporter: Rostislav Palivoda Assignee: Vladislavs Sokurenko
Resolution: Fixed Votes: 0
Labels: security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Causes
caused by ZBXNEXT-287 Fix web.page.regexp to be SSL capable... Closed
caused by ZBXNEXT-2074 web monitoring variables are not URL-... Closed
Sub-task
Team: Team A
Sprint: Sprint 72 (Jan 2021)
Story Points: 0.5

 Description   

punycode_encode_part() places a 2048-byte buffer on the stack that is written to from the codepoints array. There are no size restrictions on the originating array.

The function can be reached using the web.page.get (or similar) item.

 Comments   
Comment by Vladislavs Sokurenko [ 2021 Jan 15 ]

Fixed in:

  • pre-4.0.28rc1 0050611becd
  • pre-5.0.8rc1 2619c6781ff
  • pre-5.2.4rc1 46f547c29eb
  • pre-5.4.0alpha1 (master) 9c73a749365
Generated at Wed Apr 09 01:05:28 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.