CVE-2023-32727 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-32727 Interim 1 8 2025-02-16T02:13:05Z current 2023-12-20T00:11:43Z 2025-02-16T02:13:05Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-32727 An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2JA2U5HZXB4P57NCP4OYCXTIJXPC56ZT/ E-Mail link for openSUSE-SU-2023:0418-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YROQAWLUFWE7IZ7J6SBCJGQ67DC2ZUHR/ E-Mail link for openSUSE-SU-2023:0419-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 SUSE Package Hub 15 SP4 SUSE Package Hub 15 SP5 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Tumbleweed zabbix zabbix-agent zabbix-agent-4.0.50-bp154.2.9.1 zabbix-agent-4.0.50-bp155.3.9.1 zabbix-agent-6.0.25-1.1 zabbix-java-gateway-4.0.50-bp154.2.9.1 zabbix-java-gateway-4.0.50-bp155.3.9.1 zabbix-java-gateway-6.0.25-1.1 zabbix-phpfrontend-4.0.50-bp154.2.9.1 zabbix-phpfrontend-4.0.50-bp155.3.9.1 zabbix-proxy-4.0.50-bp154.2.9.1 zabbix-proxy-4.0.50-bp155.3.9.1 zabbix-proxy-6.0.25-1.1 zabbix-proxy-mysql-4.0.50-bp154.2.9.1 zabbix-proxy-mysql-4.0.50-bp155.3.9.1 zabbix-proxy-mysql-6.0.25-1.1 zabbix-proxy-postgresql-4.0.50-bp154.2.9.1 zabbix-proxy-postgresql-4.0.50-bp155.3.9.1 zabbix-proxy-postgresql-6.0.25-1.1 zabbix-proxy-sqlite-4.0.50-bp154.2.9.1 zabbix-proxy-sqlite-4.0.50-bp155.3.9.1 zabbix-proxy-sqlite-6.0.25-1.1 zabbix-server-4.0.50-bp154.2.9.1 zabbix-server-4.0.50-bp155.3.9.1 zabbix-server-6.0.25-1.1 zabbix-server-mysql-4.0.50-bp154.2.9.1 zabbix-server-mysql-4.0.50-bp155.3.9.1 zabbix-server-mysql-6.0.25-1.1 zabbix-server-postgresql-4.0.50-bp154.2.9.1 zabbix-server-postgresql-4.0.50-bp155.3.9.1 zabbix-server-postgresql-6.0.25-1.1 zabbix-ui-6.0.25-1.1 zabbix-agent-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-java-gateway-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-phpfrontend-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-proxy-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-proxy-mysql-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-proxy-postgresql-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-proxy-sqlite-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-server-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-server-mysql-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-server-postgresql-4.0.50-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 zabbix-agent-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-java-gateway-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-phpfrontend-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-proxy-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-proxy-mysql-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-proxy-postgresql-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-proxy-sqlite-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-server-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-server-mysql-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-server-postgresql-4.0.50-bp155.3.9.1 as a component of SUSE Package Hub 15 SP5 zabbix-agent-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-java-gateway-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-phpfrontend-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-proxy-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-proxy-mysql-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-proxy-postgresql-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-proxy-sqlite-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-server-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-server-mysql-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-server-postgresql-4.0.50-bp154.2.9.1 as a component of openSUSE Leap 15.4 zabbix-agent-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-java-gateway-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-phpfrontend-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-proxy-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-proxy-mysql-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-proxy-postgresql-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-proxy-sqlite-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-server-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-server-mysql-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-server-postgresql-4.0.50-bp155.3.9.1 as a component of openSUSE Leap 15.5 zabbix-agent-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-java-gateway-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-proxy-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-proxy-mysql-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-proxy-postgresql-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-proxy-sqlite-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-server-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-server-mysql-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-server-postgresql-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix-ui-6.0.25-1.1 as a component of openSUSE Tumbleweed zabbix as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 zabbix-agent as a component of SUSE Linux Enterprise Server 12 SP4-LTSS zabbix as a component of SUSE Linux Enterprise Server 12 SP4-LTSS zabbix-agent as a component of SUSE Linux Enterprise Server 12 SP5 zabbix as a component of SUSE Linux Enterprise Server 12 SP5 zabbix as a component of SUSE Linux Enterprise Server Teradata 12 SP3 zabbix as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS zabbix-agent as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 zabbix as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 zabbix as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 zabbix-agent as a component of SUSE OpenStack Cloud 9 zabbix as a component of SUSE OpenStack Cloud 9 zabbix-agent as a component of SUSE OpenStack Cloud Crowbar 9 zabbix as a component of SUSE OpenStack Cloud Crowbar 9 An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server. CVE-2023-32727 SUSE Package Hub 15 SP4:zabbix-agent-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-java-gateway-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-phpfrontend-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-proxy-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-proxy-mysql-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-proxy-postgresql-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-proxy-sqlite-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-server-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-server-mysql-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP4:zabbix-server-postgresql-4.0.50-bp154.2.9.1 SUSE Package Hub 15 SP5:zabbix-agent-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-java-gateway-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-phpfrontend-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-proxy-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-proxy-mysql-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-proxy-postgresql-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-proxy-sqlite-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-server-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-server-mysql-4.0.50-bp155.3.9.1 SUSE Package Hub 15 SP5:zabbix-server-postgresql-4.0.50-bp155.3.9.1 openSUSE Leap 15.4:zabbix-agent-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-java-gateway-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-phpfrontend-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-proxy-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-proxy-mysql-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-proxy-postgresql-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-proxy-sqlite-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-server-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-server-mysql-4.0.50-bp154.2.9.1 openSUSE Leap 15.4:zabbix-server-postgresql-4.0.50-bp154.2.9.1 openSUSE Leap 15.5:zabbix-agent-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-java-gateway-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-phpfrontend-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-proxy-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-proxy-mysql-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-proxy-postgresql-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-proxy-sqlite-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-server-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-server-mysql-4.0.50-bp155.3.9.1 openSUSE Leap 15.5:zabbix-server-postgresql-4.0.50-bp155.3.9.1 openSUSE Tumbleweed:zabbix-agent-6.0.25-1.1 openSUSE Tumbleweed:zabbix-java-gateway-6.0.25-1.1 openSUSE Tumbleweed:zabbix-proxy-6.0.25-1.1 openSUSE Tumbleweed:zabbix-proxy-mysql-6.0.25-1.1 openSUSE Tumbleweed:zabbix-proxy-postgresql-6.0.25-1.1 openSUSE Tumbleweed:zabbix-proxy-sqlite-6.0.25-1.1 openSUSE Tumbleweed:zabbix-server-6.0.25-1.1 openSUSE Tumbleweed:zabbix-server-mysql-6.0.25-1.1 openSUSE Tumbleweed:zabbix-server-postgresql-6.0.25-1.1 openSUSE Tumbleweed:zabbix-ui-6.0.25-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:zabbix SUSE Linux Enterprise Server 12 SP4-LTSS:zabbix SUSE Linux Enterprise Server 12 SP4-LTSS:zabbix-agent SUSE Linux Enterprise Server 12 SP5:zabbix SUSE Linux Enterprise Server 12 SP5:zabbix-agent SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:zabbix SUSE Linux Enterprise Server Teradata 12 SP3:zabbix SUSE Linux Enterprise Server for SAP Applications 12 SP4:zabbix SUSE Linux Enterprise Server for SAP Applications 12 SP4:zabbix-agent SUSE Linux Enterprise Server for SAP Applications 12 SP5:zabbix SUSE OpenStack Cloud 9:zabbix SUSE OpenStack Cloud 9:zabbix-agent SUSE OpenStack Cloud Crowbar 9:zabbix SUSE OpenStack Cloud Crowbar 9:zabbix-agent moderate 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H