PT-2018-11835

CVE-2018-13457

Published

2018-07-12

Updated

2020-04-14

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nagios Core versions 4.4.1 and earlier

Description The issue allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket, due to a NULL pointer dereference vulnerability in qh echo.

Recommendations For Nagios Core versions 4.4.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

D0Lph1N98

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers

CVE-2018-13457

MGASA-2019-0104