CVE catalog

CVE-2022-39289

zoneminder: CVE-2022-39289

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.95% · Oct 25, 2026

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianzonemindersid1.36.37+dfsg1-1.1fixed
Debianzoneminderforky1.36.37+dfsg1-1.1fixed
Debianzonemindertrixie1.36.35+dfsg1-1fixed
Debianzoneminderbookworm1.36.33+dfsg1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianzonemindersourcesid1.36.31+dfsg1-1unimportantNot reported[1021565]
Debianzonemindersourceforky1.36.31+dfsg1-1unimportantNot reported[1021565]
Debianzonemindersourcetrixie1.36.31+dfsg1-1unimportantNot reported[1021565]
Debianzonemindersourcebookworm1.36.31+dfsg1-1unimportantNot reported[1021565]

[Debian bug #1021565]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [zoneminder]Fixed
    Details (2)

    • 1.36.33+dfsg1-1 · amd64 · bookworm

      Fixed · Fixed: 1.36.31+dfsg1-1

      dsa · zoneminder · debian · bookworm

    • 1.36.33+dfsg1-1 · arm64 · bookworm

      Fixed · Fixed: 1.36.31+dfsg1-1

      dsa · zoneminder · debian · bookworm

  • [zoneminder-doc]Fixed

    Source package: [zoneminder]

    Details (2)

    • 1.36.33+dfsg1-1 · all · bookworm

      Fixed · Fixed: 1.36.31+dfsg1-1

      dsa · zoneminder · debian · bookworm

    • 1.36.33+dfsg1-1 · all · bookworm

      Fixed · Fixed: 1.36.31+dfsg1-1

      dsa · zoneminder · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]