CVEvulnerability

CVE-2014-1878

5.0 MEDIUM Published 2014-02-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.

Affected configurations

• icinga icinga (<= 1.8.5) • icinga icinga 1.8.0 • icinga icinga 1.8.1 • icinga icinga 1.8.2 • icinga icinga 1.8.3 • icinga icinga 1.8.4 • icinga icinga 1.9.0 • icinga icinga 1.9.1 • icinga icinga 1.9.2 • icinga icinga 1.9.3 • icinga icinga 1.9.4 • icinga icinga 1.10.0 • icinga icinga 1.10.1 • icinga icinga 1.10.2 • nagios nagios (<= 4.0.3) • nagios nagios 4.0.0 • nagios nagios 4.0.2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References