CVE-2013-6824
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix...
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
Exploit likelihood
What each source reports
NVD Score used
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
CVE-2013-6824- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
CVE-2013-6824- Updated
- 2026-11-02
EUVDEUVD-2013-6626 No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
EUVD-2013-6626- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvmr-q9wm-2vfr No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix...
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
GHSA-fvmr-q9wm-2vfr- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
CVE-2013-6824- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6824 No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
DEBIAN-CVE-2013-6824- Updated
- 2026-11-02
OSVMGASA-2014-0015 No score
Updated zabbix packages fix two security vulnerabilities
Updated zabbix packages fixes security vulnerability:
This update multiples vulnerabilities.
- Fix vulnerability for remote command execution injection (ZBX-7479, CVE-2013-6824)
- Fix SQL injection vulnerability (ZBX-7091, CVE-2013-5743)
- Fix XSS issues (ZBX-6952)
- Record
MGASA-2014-0015- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-6824 No score
Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.
- Record
UBUNTU-CVE-2013-6824- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6824 is a high vulnerability (CVSS 7.5) in Zabbix, published December 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in zabbix 1:2.2.0+dfsg-6.
References
support.zabbix.com/browse/ZBX-7479
zabbix.com/rn1.8.19rc1.php
security.gentoo.org/glsa/glsa-201401-26.xml
nvd.nist.gov/vuln/detail/CVE-2013-6824
Show 11 moreShow less
github.com/advisories/GHSA-fvmr-q9wm-2vfr
security-tracker.debian.org/tracker/CVE-2013-6824
advisories.mageia.org/MGASA-2014-0015.html
lists.fedoraproject.org/pipermail/package-announce/2013-December/123446.html
bugs.mageia.org/show_bug.cgi?id=11868
ubuntu.com/security/CVE-2013-6824
cve.org/CVERecord?id=CVE-2013-6824