Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nagios | Mar 21, 2024 | Feb 28, 2014 |
| Amazon_linux | — | Upgrade nagios | Oct 3, 2017 | Feb 28, 2014 |
| Debian | — | Upgrade nagios3Upgrade icinga | Feb 20, 2019 | Feb 28, 2014 |
| Suse | — | Upgrade nagiosUpgrade nagios-develUpgrade nagios-www | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade nagios3-cgiUpgrade nagios3-core | Apr 5, 2017 | Feb 28, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub