Icinga: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2021-37698

  Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer

  Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu Alpine
  Aug 19, 2021

Revision history

1. 2024-12-08 #5

   Neue Updates von Gentoo aufgenommen

2. 2024-11-17 #4

   Neue Updates von Debian aufgenommen

3. 2022-10-25 #3

   Neue Updates von SUSE aufgenommen

4. 2021-11-10 #2

   Neue Updates von Debian aufgenommen

5. 2021-08-19 #1

   Initiale Fassung

References

• Icinga Security Releases vom 2021-08-19
  https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release/
• Debian Security Advisory DLA-2816 vom 2021-11-10
  https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html
• SUSE Security Update SUSE-SU-2022:3725-1 vom 2022-10-25
  https://lists.suse.com/pipermail/sle-security-updates/2022-October/012665.html
• Debian Security Advisory DLA-3953 vom 2024-11-16
  https://lists.debian.org/debian-lts-announce/2024/11/msg00010.html
• Gentoo Linux Security Advisory GLSA-202412-08 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-08