qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nagios4 | Jul 30, 2024 | Jul 12, 2018 |
| Suse | — | Upgrade nagios-wwwUpgrade nagios-www-dchUpgrade nagiosUpgrade nagios-develUpgrade nagios-contribUpgrade nagios-theme-exfoliation | Apr 12, 2020 | Jul 12, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub