CVE-2018-6532
Fixed in a distro release EPSS 1%
An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhaust a lot of memory on the server side, triggering the OOM killer.
Products: icinga
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icinga2 | 2.8.4-1 |
| Debian 13 | icinga2 | 2.8.4-1 |
| Debian 14 | icinga2 | 2.8.4-1 |
| Ubuntu 16.04 LTS | icinga | no fix |
| Ubuntu 18.04 LTS | icinga | no fix |