Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-9565

Fixed in a distro release EPSS 23%

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Published 2016-12-15 · CVE record · OSV

Products: nagios

Distro releases

ReleasePackageFixed in
Debian 7nagios33.4.1-3+deb7u3
Red Hat openstack 5nagios0:3.5.1-9.el6
Red Hat openstack 5nagios0:3.5.1-9.el7
Red Hat openstack 5nagios-common0:3.5.1-9.el7
Red Hat openstack 5nagios-common0:3.5.1-9.el6
Red Hat openstack 5nagios-debuginfo0:3.5.1-9.el7
Red Hat openstack 5nagios-debuginfo0:3.5.1-9.el6
Red Hat openstack 5nagios-devel0:3.5.1-9.el7
Red Hat openstack 5nagios-devel0:3.5.1-9.el6
Red Hat openstack 6nagios0:3.5.1-9.el7
Red Hat openstack 6nagios-common0:3.5.1-9.el7
Red Hat openstack 6nagios-debuginfo0:3.5.1-9.el7
Red Hat openstack 7nagios0:3.5.1-9.el7
Red Hat openstack 7nagios-common0:3.5.1-9.el7
Red Hat openstack 7nagios-debuginfo0:3.5.1-9.el7
Red Hat storage 3.1 nagios el6nagios0:3.5.1-9.el6
Red Hat storage 3.1 nagios el6nagios-common0:3.5.1-9.el6
Red Hat storage 3.1 nagios el6nagios-debuginfo0:3.5.1-9.el6
Red Hat storage 3.1 nagios el6nagios-devel0:3.5.1-9.el6
Red Hat storage 3.1 nagios el7nagios0:3.5.1-9.el7
Red Hat storage 3.1 nagios el7nagios-common0:3.5.1-9.el7
Red Hat storage 3.1 nagios el7nagios-debuginfo0:3.5.1-9.el7
Red Hat storage 3.1 server el6nagios0:3.5.1-9.el6
Red Hat storage 3.1 server el6nagios-common0:3.5.1-9.el6
Red Hat storage 3.1 server el6nagios-debuginfo0:3.5.1-9.el6
Red Hat storage 3.1 server el7nagios0:3.5.1-9.el7
Red Hat storage 3.1 server el7nagios-common0:3.5.1-9.el7
Red Hat storage 3.1 server el7nagios-debuginfo0:3.5.1-9.el7