CVE-2018-13441
Fixed in a distro release EPSS 1%
qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Products: nagios
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nagios4 | 4.3.4-3 |
| Debian 13 | nagios4 | 4.3.4-3 |
| Debian 14 | nagios4 | 4.3.4-3 |
| SUSE Package Hub 15 SP1 | nagios | 4.4.5-bp151.4.3.1 |
| openSUSE Leap 15.1 | nagios | 4.4.5-lp151.5.4.1 |
| openSUSE Tumbleweed | nagios | 4.4.6-2.5 |