Cloudanix VulnDB

CVE-2016-9565

Critical · 9.8

CVSS

9.8

EPSS

22.7%

Published

Dec 15, 2016

CISA due date

—

The record

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Affected packages

Ecosystem Package Introduced Fixed
Debian:7 nagios3 0 3.4.1-3+deb7u3
Mageia:5 nagios 0 4.0.8-3.1.mga5
Red Hat:openstack:5::el6 nagios 0 0:3.5.1-9.el6
Red Hat:openstack:5::el6 nagios-common 0 0:3.5.1-9.el6
Red Hat:openstack:5::el6 nagios-debuginfo 0 0:3.5.1-9.el6
Red Hat:openstack:5::el6 nagios-devel 0 0:3.5.1-9.el6
Red Hat:openstack:5::el7 nagios 0 0:3.5.1-9.el7
Red Hat:openstack:5::el7 nagios-common 0 0:3.5.1-9.el7
Red Hat:openstack:5::el7 nagios-debuginfo 0 0:3.5.1-9.el7
Red Hat:openstack:5::el7 nagios-devel 0 0:3.5.1-9.el7
Red Hat:openstack:6::el7 nagios 0 0:3.5.1-9.el7
Red Hat:openstack:6::el7 nagios-common 0 0:3.5.1-9.el7
Red Hat:openstack:6::el7 nagios-debuginfo 0 0:3.5.1-9.el7
Red Hat:openstack:7::el7 nagios 0 0:3.5.1-9.el7
Red Hat:openstack:7::el7 nagios-common 0 0:3.5.1-9.el7
Red Hat:openstack:7::el7 nagios-debuginfo 0 0:3.5.1-9.el7
Red Hat:storage:3.1:nagios:el6 nagios 0 0:3.5.1-9.el6
Red Hat:storage:3.1:nagios:el6 nagios-common 0 0:3.5.1-9.el6
Red Hat:storage:3.1:nagios:el6 nagios-debuginfo 0 0:3.5.1-9.el6
Red Hat:storage:3.1:nagios:el6 nagios-devel 0 0:3.5.1-9.el6
Red Hat:storage:3.1:nagios:el7 nagios 0 0:3.5.1-9.el7
Red Hat:storage:3.1:nagios:el7 nagios-common 0 0:3.5.1-9.el7
Red Hat:storage:3.1:nagios:el7 nagios-debuginfo 0 0:3.5.1-9.el7
Red Hat:storage:3.1:server:el6 nagios 0 0:3.5.1-9.el6
Red Hat:storage:3.1:server:el6 nagios-common 0 0:3.5.1-9.el6
Red Hat:storage:3.1:server:el6 nagios-debuginfo 0 0:3.5.1-9.el6
Red Hat:storage:3.1:server:el6 nagios-devel 0 0:3.5.1-9.el6
Red Hat:storage:3.1:server:el7 nagios 0 0:3.5.1-9.el7
Red Hat:storage:3.1:server:el7 nagios-common 0 0:3.5.1-9.el7
Red Hat:storage:3.1:server:el7 nagios-debuginfo 0 0:3.5.1-9.el7
Ubuntu:14.04:LTS nagios3 0 3.5.1-1ubuntu1

Related vulnerabilities