icinga2 - security update

Fixed packages 1

Vulnerabilities 4

• Critical 9.8
  CVE-2024-49369 Public exploit

  Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

  Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an atta…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  Nov 12, 2024
• High 8.8
  CVE-2021-32739

  Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities

  Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation fo…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  Jul 15, 2021
• High 8.8
  CVE-2021-32743

  Passwords used to access external services inadvertently exposed through API

  Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 featur…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  Jul 15, 2021
• High 7.5
  CVE-2021-37698

  Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer

  Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu Alpine
  Aug 19, 2021