← Back

CVE-2014-1878

nvd nist
Published: Feb 28, 2014Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.

Affected (20)

Products: Icinga: Icinga · Nagios: Nagios
1 product
Icinga
1 product
Nagios
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Icinga
Up to 1.8.5
Version 1.10.0
Version 1.10.1
Version 1.10.2
Version 1.8.0
Version 1.8.1
Version 1.8.2
Version 1.8.3
Version 1.8.4
Version 1.9.0
Version 1.9.1
Version 1.9.2
Version 1.9.3
Version 1.9.4
Nagios
Up to 4.0.3
Version 4.0.0 beta1
Version 4.0.0 beta2
Version 4.0.0 beta3
Version 4.0.0 beta4
Version 4.0.2

References (14)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.