PT-2018-11835

CVE-2018-13457

Publicado

2018-07-12

Atualizado

2020-04-14

Descrição por

CVSS 3.1

5.5

Média

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nagios Core versions 4.4.1 and earlier

Description The issue allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket, due to a NULL pointer dereference vulnerability in qh echo.

Recommendations For Nagios Core versions 4.4.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

D0Lph1N98

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-476: NULL Pointer Dereference

Identificadores relacionados

CVE-2018-13457

MGASA-2019-0104