Skip to content
OpenAdvisories
Unscored DLA-1615-1 5 CVEs

nagios3 - security update

Published Dec 24, 2018 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 nagios3 3.5.1.dfsg-2+deb8u1

Vulnerabilities 5

  • Unscored —
    CVE-2013-7108 Public exploit EPSS 62%

    Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.1…

  • Unscored —

    Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows…

  • Unscored —

    Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and…

  • Unscored —
    CVE-2016-9566 Public exploit

    base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain roo…

  • Unscored —

    Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivere…