PT-2018-17616
CVE-2018-6532
·
Publicado
2018-02-27
·
Atualizado
2018-03-23
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Icinga versions 2.x through 2.8.1
Description
An issue allows an attacker to exhaust a lot of memory on the server side by sending specially crafted requests, triggering the OOM killer. This can be done through both authenticated and unauthenticated requests.
Recommendations
For versions 2.x through 2.8.1, update to a version that contains a fix for this issue to prevent memory exhaustion attacks.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾