← Database

CVE-2026-77021

N/A CVSS: N/A Published: 2026-09-21 Modified: 2026-09-21

Description

Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an arbitrary size.

Affected Platforms

Unknown

Weakness Type

CWE-409

References