Skip to content
OpenAdvisories
High DLA-2816-1 3 CVEs

icinga2 - security update

Published Nov 10, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 icinga2 2.6.0-2+deb9u2

Vulnerabilities 3

  • High 8.8
    CVE-2021-32739

    Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation fo…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • High 8.8
    CVE-2021-32743

    Passwords used to access external services inadvertently exposed through API

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 featur…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • High 7.5
    CVE-2021-37698

    Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu Alpine