Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade icinga2 | Jul 30, 2024 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/icinga2. | Dec 9, 2024 | Dec 15, 2020 |
| Suse | — | Upgrade icinga2Upgrade icinga2-docUpgrade nano-icinga2Upgrade vim-icinga2Upgrade icinga2-ido-mysqlUpgrade icinga2-commonUpgrade icinga2-ido-pgsqlUpgrade icinga2-bin | Jul 13, 2021 | Dec 15, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub