CVE-2014-1878
Fixed in a distro release EPSS 3%
Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | icinga | 1.0.2-2+squeeze2 |
| Debian 7 | icinga | 1.7.1-7 |
| Debian 7 | nagios3 | 3.4.1-3+deb7u2 |
| Debian 8 | nagios3 | 3.5.1.dfsg-2+deb8u1 |
| Ubuntu 14.04 LTS | nagios3 | 3.5.1-1ubuntu1.1 |
| Ubuntu 16.04 LTS | nagios3 | 3.5.1.dfsg-2.1ubuntu1.1 |
| openSUSE Tumbleweed | nagios | 4.4.6-2.5 |