CVE-2023-31493
Publication date 15 October 2024
Last updated 23 October 2024
Ubuntu priority
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
Status
Package | Ubuntu Release | Status |
---|---|---|
zoneminder | 24.10 oracular |
Needs evaluation
|
24.04 LTS noble |
Needs evaluation
|
|
22.04 LTS jammy |
Needs evaluation
|
|
20.04 LTS focal |
Needs evaluation
|
|
16.04 LTS xenial |
Needs evaluation
|