Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-9566 (GCVE-0-2016-9566)
Vulnerability from cvelistv5
Published
2016-12-15 22:00
Modified
2024-08-06 02:50
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:50:38.682Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-201710-20",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "40921",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"name": "94919",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94919"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"name": "RHSA-2017:0258",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "GLSA-201612-51",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"name": "RHSA-2017:0212",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "[debian-lts-announce] 20181224 [SECURITY] [DLA 1615-1] nagios3 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"name": "RHSA-2017:0259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "1037487",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1037487"
},
{
"name": "20161215 Nagios Core \u003c 4.2.4 Root Privilege Escalation [CVE-2016-9566]",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"name": "RHSA-2017:0214",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-07T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-25T10:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "GLSA-201710-20",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "40921",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"name": "94919",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94919"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"name": "RHSA-2017:0258",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "GLSA-201612-51",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"name": "RHSA-2017:0212",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "[debian-lts-announce] 20181224 [SECURITY] [DLA 1615-1] nagios3 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"name": "RHSA-2017:0259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "1037487",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1037487"
},
{
"name": "20161215 Nagios Core \u003c 4.2.4 Root Privilege Escalation [CVE-2016-9566]",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"name": "RHSA-2017:0214",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9566",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "40921",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"name": "94919",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94919"
},
{
"name": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4",
"refsource": "CONFIRM",
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "GLSA-201612-51",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "[debian-lts-announce] 20181224 [SECURITY] [DLA 1615-1] nagios3 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "1037487",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037487"
},
{
"name": "20161215 Nagios Core \u003c 4.2.4 Root Privilege Escalation [CVE-2016-9566]",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"refsource": "MISC",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-9566",
"datePublished": "2016-12-15T22:00:00",
"dateReserved": "2016-11-22T00:00:00",
"dateUpdated": "2024-08-06T02:50:38.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2016-9566\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2016-12-15T22:59:00.537\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.\"},{\"lang\":\"es\",\"value\":\"base/logging.c en Nagios Core en versiones anteriores a 4.2.4 permite a usuarios locales con acceso a una cuenta en el grupo nagios obtener privilegios a trav\u00e9s de un ataque de symlink al archivo de inicio de sesi\u00f3n. NOTA: esto puede ser aprovechado por atacantes remotos usando CVE-2016-9565.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-59\"},{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.2.3\",\"matchCriteriaId\":\"2C4E32CA-1439-4B07-BBB2-38DCD001BD6A\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0211.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0212.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0213.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0214.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0258.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0259.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://seclists.org/fulldisclosure/2016/Dec/58\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/94919\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037487\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402869\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201612-51\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201702-26\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201710-20\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.exploit-db.com/exploits/40921/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.nagios.org/projects/nagios-core/history/4x/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0211.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0212.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0213.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0214.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0258.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0259.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2016/Dec/58\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/94919\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037487\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402869\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201612-51\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201702-26\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201710-20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/40921/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.nagios.org/projects/nagios-core/history/4x/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
rhsa-2017:0213
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2025-08-02 04:18
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0213",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0213.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:18:05+00:00",
"generator": {
"date": "2025-08-02T04:18:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0213",
"initial_release_date": "2017-01-31T05:52:24+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:18:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0211
Vulnerability from csaf_redhat
Published
2017-01-31 05:53
Modified
2025-08-02 04:18
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0211",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0211.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:18:01+00:00",
"generator": {
"date": "2025-08-02T04:18:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0211",
"initial_release_date": "2017-01-31T05:53:01+00:00",
"revision_history": [
{
"date": "2017-01-31T05:53:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:53:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:18:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0212
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2025-08-02 04:17
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0212",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0212.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:17:56+00:00",
"generator": {
"date": "2025-08-02T04:17:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0212",
"initial_release_date": "2017-01-31T05:52:40+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:17:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0259
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2025-08-02 04:17
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0259",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0259.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:17:50+00:00",
"generator": {
"date": "2025-08-02T04:17:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0259",
"initial_release_date": "2017-02-07T11:16:26+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:17:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0258
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2025-08-02 04:17
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0258",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0258.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:17:55+00:00",
"generator": {
"date": "2025-08-02T04:17:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0258",
"initial_release_date": "2017-02-07T11:16:36+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:17:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0214
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2025-08-02 04:17
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0214",
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0214.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2025-08-02T04:17:40+00:00",
"generator": {
"date": "2025-08-02T04:17:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2017:0214",
"initial_release_date": "2017-01-31T05:52:08+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-02T04:17:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
suse-su-2024:1629-1
Vulnerability from csaf_suse
Published
2024-05-14 02:28
Modified
2024-05-14 02:28
Summary
Security update for SUSE Manager Client Tools Beta
Notes
Title of the patch
Security update for SUSE Manager Client Tools Beta
Description of the patch
This update for SUSE Manager Client Tools Beta fixes the following issues:
- Changed codestream origin of SUSE Manager Client Tools Beta (no source changes)
icinga in SUSE Manager Client Tools Beta also received the following security fixes:
- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637)
- CVE-2019-3698 : Symbolic Link (Symlink) following
vulnerability in the cronjob allows local attackers to cause cause
DoS or potentially escalate privileges by winning a race (bsc#1156309)
Patchnames
SUSE-2024-1629,SUSE-SLE-Manager-Tools-12-2024-1629,SUSE-SLE-Manager-Tools-12-BETA-2024-1629,SUSE-SLE-Module-Adv-Systems-Management-12-2024-1629,SUSE-SLE-Module-Containers-12-2024-1629,SUSE-SLE-SDK-12-SP5-2024-1629,SUSE-SLE-SERVER-12-SP5-2024-1629,SUSE-SLE-WE-12-SP5-2024-1629
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for SUSE Manager Client Tools Beta",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for SUSE Manager Client Tools Beta fixes the following issues:\n\n- Changed codestream origin of SUSE Manager Client Tools Beta (no source changes)\n\nicinga in SUSE Manager Client Tools Beta also received the following security fixes:\n \n- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637)\n- CVE-2019-3698 : Symbolic Link (Symlink) following\n vulnerability in the cronjob allows local attackers to cause cause\n DoS or potentially escalate privileges by winning a race (bsc#1156309)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1629,SUSE-SLE-Manager-Tools-12-2024-1629,SUSE-SLE-Manager-Tools-12-BETA-2024-1629,SUSE-SLE-Module-Adv-Systems-Management-12-2024-1629,SUSE-SLE-Module-Containers-12-2024-1629,SUSE-SLE-SDK-12-SP5-2024-1629,SUSE-SLE-SERVER-12-SP5-2024-1629,SUSE-SLE-WE-12-SP5-2024-1629",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1629-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1629-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241629-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1629-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-May/035252.html"
},
{
"category": "self",
"summary": "SUSE Bug 1014637",
"url": "https://bugzilla.suse.com/1014637"
},
{
"category": "self",
"summary": "SUSE Bug 1156309",
"url": "https://bugzilla.suse.com/1156309"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9566 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3698/"
}
],
"title": "Security update for SUSE Manager Client Tools Beta",
"tracking": {
"current_release_date": "2024-05-14T02:28:49Z",
"generator": {
"date": "2024-05-14T02:28:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1629-1",
"initial_release_date": "2024-05-14T02:28:49Z",
"revision_history": [
{
"date": "2024-05-14T02:28:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-1.13.3-12.8.1.aarch64",
"product_id": "icinga-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.aarch64",
"product_id": "icinga-devel-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.aarch64",
"product_id": "icinga-doc-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.aarch64",
"product_id": "icinga-idoutils-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-www-1.13.3-12.8.1.aarch64",
"product_id": "icinga-www-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.aarch64",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.aarch64",
"product_id": "icinga-www-config-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.aarch64",
"product": {
"name": "libzmq3-4.0.4-15.8.1.aarch64",
"product_id": "libzmq3-4.0.4-15.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.aarch64",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.aarch64",
"product_id": "monitoring-tools-1.13.3-12.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.aarch64",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.aarch64",
"product_id": "zeromq-devel-4.0.4-15.8.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-1.13.3-12.8.1.i586",
"product_id": "icinga-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.i586",
"product_id": "icinga-devel-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.i586",
"product_id": "icinga-doc-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.i586",
"product_id": "icinga-idoutils-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.i586",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.i586",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.i586",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.i586",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.i586",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-www-1.13.3-12.8.1.i586",
"product_id": "icinga-www-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.i586",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.i586",
"product_id": "icinga-www-config-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.i586",
"product": {
"name": "libzmq3-4.0.4-15.8.1.i586",
"product_id": "libzmq3-4.0.4-15.8.1.i586"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.i586",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.i586",
"product_id": "monitoring-tools-1.13.3-12.8.1.i586"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.i586",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.i586",
"product_id": "zeromq-devel-4.0.4-15.8.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"product": {
"name": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"product_id": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
}
},
{
"category": "product_version",
"name": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"product": {
"name": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"product_id": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch"
}
},
{
"category": "product_version",
"name": "grafana-sap-providers-1.1-1.7.1.noarch",
"product": {
"name": "grafana-sap-providers-1.1-1.7.1.noarch",
"product_id": "grafana-sap-providers-1.1-1.7.1.noarch"
}
},
{
"category": "product_version",
"name": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"product": {
"name": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"product_id": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
}
},
{
"category": "product_version",
"name": "hwdata-0.314-10.14.1.noarch",
"product": {
"name": "hwdata-0.314-10.14.1.noarch",
"product_id": "hwdata-0.314-10.14.1.noarch"
}
},
{
"category": "product_version",
"name": "sysuser-shadow-2.0-1.9.1.noarch",
"product": {
"name": "sysuser-shadow-2.0-1.9.1.noarch",
"product_id": "sysuser-shadow-2.0-1.9.1.noarch"
}
},
{
"category": "product_version",
"name": "sysuser-tools-2.0-1.9.1.noarch",
"product": {
"name": "sysuser-tools-2.0-1.9.1.noarch",
"product_id": "sysuser-tools-2.0-1.9.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-devel-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-doc-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-idoutils-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-www-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-www-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.ppc64le",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.ppc64le",
"product_id": "icinga-www-config-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.ppc64le",
"product": {
"name": "libzmq3-4.0.4-15.8.1.ppc64le",
"product_id": "libzmq3-4.0.4-15.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.ppc64le",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.ppc64le",
"product_id": "monitoring-tools-1.13.3-12.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.ppc64le",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.ppc64le",
"product_id": "zeromq-devel-4.0.4-15.8.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-1.13.3-12.8.1.s390",
"product_id": "icinga-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.s390",
"product_id": "icinga-devel-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.s390",
"product_id": "icinga-doc-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.s390",
"product_id": "icinga-idoutils-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-www-1.13.3-12.8.1.s390",
"product_id": "icinga-www-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.s390",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.s390",
"product_id": "icinga-www-config-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.s390",
"product": {
"name": "libzmq3-4.0.4-15.8.1.s390",
"product_id": "libzmq3-4.0.4-15.8.1.s390"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.s390",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.s390",
"product_id": "monitoring-tools-1.13.3-12.8.1.s390"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.s390",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.s390",
"product_id": "zeromq-devel-4.0.4-15.8.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-1.13.3-12.8.1.s390x",
"product_id": "icinga-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.s390x",
"product_id": "icinga-devel-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.s390x",
"product_id": "icinga-doc-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.s390x",
"product_id": "icinga-idoutils-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-www-1.13.3-12.8.1.s390x",
"product_id": "icinga-www-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.s390x",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.s390x",
"product_id": "icinga-www-config-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.s390x",
"product": {
"name": "libzmq3-4.0.4-15.8.1.s390x",
"product_id": "libzmq3-4.0.4-15.8.1.s390x"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.s390x",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.s390x",
"product_id": "monitoring-tools-1.13.3-12.8.1.s390x"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.s390x",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.s390x",
"product_id": "zeromq-devel-4.0.4-15.8.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-1.13.3-12.8.1.x86_64",
"product_id": "icinga-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-devel-1.13.3-12.8.1.x86_64",
"product_id": "icinga-devel-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-doc-1.13.3-12.8.1.x86_64",
"product_id": "icinga-doc-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-idoutils-1.13.3-12.8.1.x86_64",
"product_id": "icinga-idoutils-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"product_id": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"product_id": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"product_id": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-www-1.13.3-12.8.1.x86_64",
"product_id": "icinga-www-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.8.1.x86_64",
"product": {
"name": "icinga-www-config-1.13.3-12.8.1.x86_64",
"product_id": "icinga-www-config-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libzmq3-4.0.4-15.8.1.x86_64",
"product": {
"name": "libzmq3-4.0.4-15.8.1.x86_64",
"product_id": "libzmq3-4.0.4-15.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.8.1.x86_64",
"product": {
"name": "monitoring-tools-1.13.3-12.8.1.x86_64",
"product_id": "monitoring-tools-1.13.3-12.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "zeromq-devel-4.0.4-15.8.1.x86_64",
"product": {
"name": "zeromq-devel-4.0.4-15.8.1.x86_64",
"product_id": "zeromq-devel-4.0.4-15.8.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Manager Client Tools 12",
"product": {
"name": "SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12"
}
},
{
"category": "product_name",
"name": "SUSE Manager Client Tools 12-BETA",
"product": {
"name": "SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA"
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product": {
"name": "SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product_id": "SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-adv-systems-management:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Containers 12",
"product": {
"name": "SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-containers:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
},
"product_reference": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch"
},
"product_reference": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sap-providers-1.1-1.7.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch"
},
"product_reference": "grafana-sap-providers-1.1-1.7.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
},
"product_reference": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hwdata-0.314-10.14.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch"
},
"product_reference": "hwdata-0.314-10.14.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-www-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-www-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-www-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-www-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le"
},
"product_reference": "libzmq3-4.0.4-15.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x"
},
"product_reference": "libzmq3-4.0.4-15.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-shadow-2.0-1.9.1.noarch as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-shadow-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
},
"product_reference": "grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch"
},
"product_reference": "grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sap-providers-1.1-1.7.1.noarch as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch"
},
"product_reference": "grafana-sap-providers-1.1-1.7.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch"
},
"product_reference": "grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-devel-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-doc-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-www-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-www-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-www-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-www-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64"
},
"product_reference": "icinga-www-config-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le"
},
"product_reference": "libzmq3-4.0.4-15.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x"
},
"product_reference": "libzmq3-4.0.4-15.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.aarch64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.ppc64le as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.s390x as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.8.1.x86_64 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64"
},
"product_reference": "monitoring-tools-1.13.3-12.8.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-shadow-2.0-1.9.1.noarch as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-shadow-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.ppc64le as component of SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product_id": "SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le"
},
"product_reference": "libzmq3-4.0.4-15.8.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Advanced Systems Management 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.s390x as component of SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product_id": "SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x"
},
"product_reference": "libzmq3-4.0.4-15.8.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Advanced Systems Management 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.x86_64 as component of SUSE Linux Enterprise Module for Advanced Systems Management 12",
"product_id": "SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Advanced Systems Management 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-shadow-2.0-1.9.1.noarch as component of SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-shadow-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le"
},
"product_reference": "libzmq3-4.0.4-15.8.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x"
},
"product_reference": "libzmq3-4.0.4-15.8.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zeromq-devel-4.0.4-15.8.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64"
},
"product_reference": "zeromq-devel-4.0.4-15.8.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zeromq-devel-4.0.4-15.8.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le"
},
"product_reference": "zeromq-devel-4.0.4-15.8.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zeromq-devel-4.0.4-15.8.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x"
},
"product_reference": "zeromq-devel-4.0.4-15.8.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zeromq-devel-4.0.4-15.8.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64"
},
"product_reference": "zeromq-devel-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-shadow-2.0-1.9.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-shadow-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-tools-2.0-1.9.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-tools-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-shadow-2.0-1.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-shadow-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sysuser-tools-2.0-1.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch"
},
"product_reference": "sysuser-tools-2.0-1.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzmq3-4.0.4-15.8.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64"
},
"product_reference": "libzmq3-4.0.4-15.8.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9566"
}
],
"notes": [
{
"category": "general",
"text": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9566",
"url": "https://www.suse.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "SUSE Bug 1014637 for CVE-2016-9566",
"url": "https://bugzilla.suse.com/1014637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-14T02:28:49Z",
"details": "important"
}
],
"title": "CVE-2016-9566"
},
{
"cve": "CVE-2019-3698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3698"
}
],
"notes": [
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3698",
"url": "https://www.suse.com/security/cve/CVE-2019-3698"
},
{
"category": "external",
"summary": "SUSE Bug 1150550 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1150550"
},
{
"category": "external",
"summary": "SUSE Bug 1156309 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1156309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1.noarch",
"SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1.noarch",
"SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1.noarch",
"SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1.noarch",
"SUSE Manager Client Tools 12:hwdata-0.314-10.14.1.noarch",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.aarch64",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.ppc64le",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.s390x",
"SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1.x86_64",
"SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-14T02:28:49Z",
"details": "moderate"
}
],
"title": "CVE-2019-3698"
}
]
}
suse-su-2022:3576-1
Vulnerability from csaf_suse
Published
2022-10-13 09:11
Modified
2022-10-13 09:11
Summary
Security update for icinga
Notes
Title of the patch
Security update for icinga
Description of the patch
This update for icinga fixes the following issues:
- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637).
- CVE-2019-3698: Fixed symbolic link vulnerability that can cause DoS or potentially escalate privileges (bsc#1156309).
Patchnames
SUSE-2022-3576,SUSE-SLE-Manager-Tools-12-2022-3576
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for icinga",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for icinga fixes the following issues:\n\n- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637).\n- CVE-2019-3698: Fixed symbolic link vulnerability that can cause DoS or potentially escalate privileges (bsc#1156309).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2022-3576,SUSE-SLE-Manager-Tools-12-2022-3576",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3576-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:3576-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20223576-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:3576-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-October/012534.html"
},
{
"category": "self",
"summary": "SUSE Bug 1014637",
"url": "https://bugzilla.suse.com/1014637"
},
{
"category": "self",
"summary": "SUSE Bug 1156309",
"url": "https://bugzilla.suse.com/1156309"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9566 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3698/"
}
],
"title": "Security update for icinga",
"tracking": {
"current_release_date": "2022-10-13T09:11:52Z",
"generator": {
"date": "2022-10-13T09:11:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:3576-1",
"initial_release_date": "2022-10-13T09:11:52Z",
"revision_history": [
{
"date": "2022-10-13T09:11:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-1.13.3-12.6.1.aarch64",
"product_id": "icinga-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.aarch64",
"product_id": "icinga-devel-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.aarch64",
"product_id": "icinga-doc-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.aarch64",
"product_id": "icinga-idoutils-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-www-1.13.3-12.6.1.aarch64",
"product_id": "icinga-www-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.aarch64",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.aarch64",
"product_id": "icinga-www-config-1.13.3-12.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.aarch64",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.aarch64",
"product_id": "monitoring-tools-1.13.3-12.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-1.13.3-12.6.1.i586",
"product_id": "icinga-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.i586",
"product_id": "icinga-devel-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.i586",
"product_id": "icinga-doc-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.i586",
"product_id": "icinga-idoutils-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.i586",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.i586",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.i586",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.i586",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.i586",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-www-1.13.3-12.6.1.i586",
"product_id": "icinga-www-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.i586",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.i586",
"product_id": "icinga-www-config-1.13.3-12.6.1.i586"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.i586",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.i586",
"product_id": "monitoring-tools-1.13.3-12.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-devel-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-doc-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-idoutils-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-www-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-www-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.ppc64le",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.ppc64le",
"product_id": "icinga-www-config-1.13.3-12.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.ppc64le",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.ppc64le",
"product_id": "monitoring-tools-1.13.3-12.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-1.13.3-12.6.1.s390",
"product_id": "icinga-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.s390",
"product_id": "icinga-devel-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.s390",
"product_id": "icinga-doc-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.s390",
"product_id": "icinga-idoutils-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.s390",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.s390",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.s390",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-www-1.13.3-12.6.1.s390",
"product_id": "icinga-www-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.s390",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.s390",
"product_id": "icinga-www-config-1.13.3-12.6.1.s390"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.s390",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.s390",
"product_id": "monitoring-tools-1.13.3-12.6.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-1.13.3-12.6.1.s390x",
"product_id": "icinga-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.s390x",
"product_id": "icinga-devel-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.s390x",
"product_id": "icinga-doc-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.s390x",
"product_id": "icinga-idoutils-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-www-1.13.3-12.6.1.s390x",
"product_id": "icinga-www-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.s390x",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.s390x",
"product_id": "icinga-www-config-1.13.3-12.6.1.s390x"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.s390x",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.s390x",
"product_id": "monitoring-tools-1.13.3-12.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "icinga-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-1.13.3-12.6.1.x86_64",
"product_id": "icinga-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-devel-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-devel-1.13.3-12.6.1.x86_64",
"product_id": "icinga-devel-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-doc-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-doc-1.13.3-12.6.1.x86_64",
"product_id": "icinga-doc-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-idoutils-1.13.3-12.6.1.x86_64",
"product_id": "icinga-idoutils-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"product_id": "icinga-idoutils-mysql-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"product_id": "icinga-idoutils-oracle-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"product_id": "icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"product_id": "icinga-plugins-downtimes-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"product_id": "icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-www-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-www-1.13.3-12.6.1.x86_64",
"product_id": "icinga-www-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "icinga-www-config-1.13.3-12.6.1.x86_64",
"product": {
"name": "icinga-www-config-1.13.3-12.6.1.x86_64",
"product_id": "icinga-www-config-1.13.3-12.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "monitoring-tools-1.13.3-12.6.1.x86_64",
"product": {
"name": "monitoring-tools-1.13.3-12.6.1.x86_64",
"product_id": "monitoring-tools-1.13.3-12.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Manager Client Tools 12",
"product": {
"name": "SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-devel-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-devel-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-devel-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-devel-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-devel-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-doc-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-doc-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-doc-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-doc-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-doc-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-idoutils-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-idoutils-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-idoutils-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-idoutils-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-mysql-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-oracle-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-downtimes-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-www-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-www-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-www-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-www-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64"
},
"product_reference": "icinga-www-config-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le"
},
"product_reference": "icinga-www-config-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x"
},
"product_reference": "icinga-www-config-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icinga-www-config-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64"
},
"product_reference": "icinga-www-config-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.6.1.aarch64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64"
},
"product_reference": "monitoring-tools-1.13.3-12.6.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.6.1.ppc64le as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le"
},
"product_reference": "monitoring-tools-1.13.3-12.6.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.6.1.s390x as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x"
},
"product_reference": "monitoring-tools-1.13.3-12.6.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "monitoring-tools-1.13.3-12.6.1.x86_64 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
},
"product_reference": "monitoring-tools-1.13.3-12.6.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9566"
}
],
"notes": [
{
"category": "general",
"text": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9566",
"url": "https://www.suse.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "SUSE Bug 1014637 for CVE-2016-9566",
"url": "https://bugzilla.suse.com/1014637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-13T09:11:52Z",
"details": "important"
}
],
"title": "CVE-2016-9566"
},
{
"cve": "CVE-2019-3698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3698"
}
],
"notes": [
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3698",
"url": "https://www.suse.com/security/cve/CVE-2019-3698"
},
{
"category": "external",
"summary": "SUSE Bug 1150550 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1150550"
},
{
"category": "external",
"summary": "SUSE Bug 1156309 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1156309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.6.1.x86_64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.aarch64",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.ppc64le",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.s390x",
"SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-10-13T09:11:52Z",
"details": "moderate"
}
],
"title": "CVE-2019-3698"
}
]
}
ghsa-9332-j4wp-2xcq
Vulnerability from github
Published
2022-05-14 01:45
Modified
2025-04-12 13:07
Severity ?
VLAI Severity ?
Details
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
{
"affected": [],
"aliases": [
"CVE-2016-9566"
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-12-15T22:59:00Z",
"severity": "HIGH"
},
"details": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"id": "GHSA-9332-j4wp-2xcq",
"modified": "2025-04-12T13:07:30Z",
"published": "2022-05-14T01:45:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"type": "WEB",
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"type": "WEB",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"type": "WEB",
"url": "https://www.exploit-db.com/exploits/40921"
},
{
"type": "WEB",
"url": "https://www.nagios.org/projects/nagios-core/history/4x"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/94919"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1037487"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
opensuse-su-2024:11073-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
nagios-4.4.6-2.5 on GA media
Notes
Title of the patch
nagios-4.4.6-2.5 on GA media
Description of the patch
These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11073
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "nagios-4.4.6-2.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11073",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11073-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-2162 page",
"url": "https://www.suse.com/security/cve/CVE-2006-2162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4796 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1523 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2214 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4214 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-7108 page",
"url": "https://www.suse.com/security/cve/CVE-2013-7108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1878 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0726 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6209 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8641 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9566 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12847 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13441 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18245 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-13977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-13977/"
}
],
"title": "nagios-4.4.6-2.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11073-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-4.4.6-2.5.aarch64",
"product_id": "nagios-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-contrib-4.4.6-2.5.aarch64",
"product_id": "nagios-contrib-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-devel-4.4.6-2.5.aarch64",
"product_id": "nagios-devel-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-www-4.4.6-2.5.aarch64",
"product_id": "nagios-www-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.aarch64",
"product_id": "nagios-www-dch-4.4.6-2.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-4.4.6-2.5.ppc64le",
"product_id": "nagios-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-contrib-4.4.6-2.5.ppc64le",
"product_id": "nagios-contrib-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-devel-4.4.6-2.5.ppc64le",
"product_id": "nagios-devel-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-www-4.4.6-2.5.ppc64le",
"product_id": "nagios-www-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.ppc64le",
"product_id": "nagios-www-dch-4.4.6-2.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.s390x",
"product": {
"name": "nagios-4.4.6-2.5.s390x",
"product_id": "nagios-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.s390x",
"product": {
"name": "nagios-contrib-4.4.6-2.5.s390x",
"product_id": "nagios-contrib-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.s390x",
"product": {
"name": "nagios-devel-4.4.6-2.5.s390x",
"product_id": "nagios-devel-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.s390x",
"product": {
"name": "nagios-www-4.4.6-2.5.s390x",
"product_id": "nagios-www-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.s390x",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.s390x",
"product_id": "nagios-www-dch-4.4.6-2.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-4.4.6-2.5.x86_64",
"product_id": "nagios-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-contrib-4.4.6-2.5.x86_64",
"product_id": "nagios-contrib-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-devel-4.4.6-2.5.x86_64",
"product_id": "nagios-devel-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-www-4.4.6-2.5.x86_64",
"product_id": "nagios-www-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.x86_64",
"product_id": "nagios-www-dch-4.4.6-2.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x"
},
"product_reference": "nagios-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-contrib-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-contrib-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x"
},
"product_reference": "nagios-contrib-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-contrib-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-devel-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-devel-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x"
},
"product_reference": "nagios-devel-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-devel-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-www-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-www-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x"
},
"product_reference": "nagios-www-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-www-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-2162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-2162"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-2162",
"url": "https://www.suse.com/security/cve/CVE-2006-2162"
},
{
"category": "external",
"summary": "SUSE Bug 140494 for CVE-2006-2162",
"url": "https://bugzilla.suse.com/140494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-2162"
},
{
"cve": "CVE-2007-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5803"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5803",
"url": "https://www.suse.com/security/cve/CVE-2007-5803"
},
{
"category": "external",
"summary": "SUSE Bug 339447 for CVE-2007-5803",
"url": "https://bugzilla.suse.com/339447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-5803"
},
{
"cve": "CVE-2008-4796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4796"
}
],
"notes": [
{
"category": "general",
"text": "The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4796",
"url": "https://www.suse.com/security/cve/CVE-2008-4796"
},
{
"category": "external",
"summary": "SUSE Bug 1015744 for CVE-2008-4796",
"url": "https://bugzilla.suse.com/1015744"
},
{
"category": "external",
"summary": "SUSE Bug 1016483 for CVE-2008-4796",
"url": "https://bugzilla.suse.com/1016483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-4796"
},
{
"cve": "CVE-2011-1523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1523"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1523",
"url": "https://www.suse.com/security/cve/CVE-2011-1523"
},
{
"category": "external",
"summary": "SUSE Bug 682966 for CVE-2011-1523",
"url": "https://bugzilla.suse.com/682966"
},
{
"category": "external",
"summary": "SUSE Bug 697895 for CVE-2011-1523",
"url": "https://bugzilla.suse.com/697895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-1523"
},
{
"cve": "CVE-2013-2214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2214"
}
],
"notes": [
{
"category": "general",
"text": "status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup (1) overview, (2) summary, or (3) grid style in status.cgi. NOTE: this behavior is by design in most 3.x versions, but the upstream vendor \"decided to change it for Nagios 4\" and 3.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2214",
"url": "https://www.suse.com/security/cve/CVE-2013-2214"
},
{
"category": "external",
"summary": "SUSE Bug 827020 for CVE-2013-2214",
"url": "https://bugzilla.suse.com/827020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-2214"
},
{
"cve": "CVE-2013-4214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4214"
}
],
"notes": [
{
"category": "general",
"text": "rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4214",
"url": "https://www.suse.com/security/cve/CVE-2013-4214"
},
{
"category": "external",
"summary": "SUSE Bug 845536 for CVE-2013-4214",
"url": "https://bugzilla.suse.com/845536"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4214"
},
{
"cve": "CVE-2013-7108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-7108"
}
],
"notes": [
{
"category": "general",
"text": "Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/, which triggers a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-7108",
"url": "https://www.suse.com/security/cve/CVE-2013-7108"
},
{
"category": "external",
"summary": "SUSE Bug 856837 for CVE-2013-7108",
"url": "https://bugzilla.suse.com/856837"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-7108"
},
{
"cve": "CVE-2014-1878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1878"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1878",
"url": "https://www.suse.com/security/cve/CVE-2014-1878"
},
{
"category": "external",
"summary": "SUSE Bug 864843 for CVE-2014-1878",
"url": "https://bugzilla.suse.com/864843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1878"
},
{
"cve": "CVE-2016-0726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0726"
}
],
"notes": [
{
"category": "general",
"text": "The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0726",
"url": "https://www.suse.com/security/cve/CVE-2016-0726"
},
{
"category": "external",
"summary": "SUSE Bug 961115 for CVE-2016-0726",
"url": "https://bugzilla.suse.com/961115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-0726"
},
{
"cve": "CVE-2016-6209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6209"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Nagios.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6209",
"url": "https://www.suse.com/security/cve/CVE-2016-6209"
},
{
"category": "external",
"summary": "SUSE Bug 989759 for CVE-2016-6209",
"url": "https://bugzilla.suse.com/989759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-6209"
},
{
"cve": "CVE-2016-8641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8641"
}
],
"notes": [
{
"category": "general",
"text": "A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It\u0027s possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8641",
"url": "https://www.suse.com/security/cve/CVE-2016-8641"
},
{
"category": "external",
"summary": "SUSE Bug 1011630 for CVE-2016-8641",
"url": "https://bugzilla.suse.com/1011630"
},
{
"category": "external",
"summary": "SUSE Bug 1018047 for CVE-2016-8641",
"url": "https://bugzilla.suse.com/1018047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8641"
},
{
"cve": "CVE-2016-9566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9566"
}
],
"notes": [
{
"category": "general",
"text": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9566",
"url": "https://www.suse.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "SUSE Bug 1014637 for CVE-2016-9566",
"url": "https://bugzilla.suse.com/1014637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9566"
},
{
"cve": "CVE-2017-12847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12847"
}
],
"notes": [
{
"category": "general",
"text": "Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12847",
"url": "https://www.suse.com/security/cve/CVE-2017-12847"
},
{
"category": "external",
"summary": "SUSE Bug 1054163 for CVE-2017-12847",
"url": "https://bugzilla.suse.com/1054163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12847"
},
{
"cve": "CVE-2018-13441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13441"
}
],
"notes": [
{
"category": "general",
"text": "qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13441",
"url": "https://www.suse.com/security/cve/CVE-2018-13441"
},
{
"category": "external",
"summary": "SUSE Bug 1101293 for CVE-2018-13441",
"url": "https://bugzilla.suse.com/1101293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13441"
},
{
"cve": "CVE-2018-18245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18245"
}
],
"notes": [
{
"category": "general",
"text": "Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18245",
"url": "https://www.suse.com/security/cve/CVE-2018-18245"
},
{
"category": "external",
"summary": "SUSE Bug 1119832 for CVE-2018-18245",
"url": "https://bugzilla.suse.com/1119832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18245"
},
{
"cve": "CVE-2019-3698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3698"
}
],
"notes": [
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3698",
"url": "https://www.suse.com/security/cve/CVE-2019-3698"
},
{
"category": "external",
"summary": "SUSE Bug 1150550 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1150550"
},
{
"category": "external",
"summary": "SUSE Bug 1156309 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1156309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3698"
},
{
"cve": "CVE-2020-13977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-13977"
}
],
"notes": [
{
"category": "general",
"text": "Nagios 4.4.5 allows an attacker, who already has administrative access to change the \"URL for JSON CGIs\" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-13977",
"url": "https://www.suse.com/security/cve/CVE-2020-13977"
},
{
"category": "external",
"summary": "SUSE Bug 1172794 for CVE-2020-13977",
"url": "https://bugzilla.suse.com/1172794"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-13977"
}
]
}
fkie_cve-2016-9566
Vulnerability from fkie_nvd
Published
2016-12-15 22:59
Modified
2025-04-12 10:46
Severity ?
Summary
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0211.html | ||
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0212.html | ||
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0213.html | ||
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0214.html | ||
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0258.html | ||
| cve@mitre.org | http://rhn.redhat.com/errata/RHSA-2017-0259.html | ||
| cve@mitre.org | http://seclists.org/fulldisclosure/2016/Dec/58 | Mailing List, Third Party Advisory | |
| cve@mitre.org | http://www.securityfocus.com/bid/94919 | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.securitytracker.com/id/1037487 | ||
| cve@mitre.org | https://bugzilla.redhat.com/show_bug.cgi?id=1402869 | Issue Tracking | |
| cve@mitre.org | https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 | Issue Tracking, Patch | |
| cve@mitre.org | https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html | Exploit, Third Party Advisory | |
| cve@mitre.org | https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html | ||
| cve@mitre.org | https://security.gentoo.org/glsa/201612-51 | ||
| cve@mitre.org | https://security.gentoo.org/glsa/201702-26 | ||
| cve@mitre.org | https://security.gentoo.org/glsa/201710-20 | ||
| cve@mitre.org | https://www.exploit-db.com/exploits/40921/ | ||
| cve@mitre.org | https://www.nagios.org/projects/nagios-core/history/4x/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0211.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0212.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0213.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0214.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0258.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-0259.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2016/Dec/58 | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/94919 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1037487 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=1402869 | Issue Tracking | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 | Issue Tracking, Patch | |
| af854a3a-2127-422b-91ae-364da2661108 | https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html | Exploit, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201612-51 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201702-26 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201710-20 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.exploit-db.com/exploits/40921/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.nagios.org/projects/nagios-core/history/4x/ | Vendor Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2C4E32CA-1439-4B07-BBB2-38DCD001BD6A",
"versionEndIncluding": "4.2.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565."
},
{
"lang": "es",
"value": "base/logging.c en Nagios Core en versiones anteriores a 4.2.4 permite a usuarios locales con acceso a una cuenta en el grupo nagios obtener privilegios a trav\u00e9s de un ataque de symlink al archivo de inicio de sesi\u00f3n. NOTA: esto puede ser aprovechado por atacantes remotos usando CVE-2016-9565."
}
],
"id": "CVE-2016-9566",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-12-15T22:59:00.537",
"references": [
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94919"
},
{
"source": "cve@mitre.org",
"url": "http://www.securitytracker.com/id/1037487"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Patch"
],
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"source": "cve@mitre.org",
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"source": "cve@mitre.org",
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94919"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1037487"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Patch"
],
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-59"
},
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
wid-sec-w-2024-1103
Vulnerability from csaf_certbund
Published
2016-12-15 23:00
Modified
2024-05-13 22:00
Summary
Nagios: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Nagios ist eine Software zur Überwachung komplexer IT-Infrastrukturen.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Nagios ist eine Software zur \u00dcberwachung komplexer IT-Infrastrukturen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1103 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-1103.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1103 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1103"
},
{
"category": "external",
"summary": "Nagios Core 4.x Version History vom 2016-12-07",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9565 vom 2016-12-13",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9566 vom 2016-12-15",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0214-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0213-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0212-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0211-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0213 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0211 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0212 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0259 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0258 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3253-1 vom 2017-04-03",
"url": "http://www.ubuntu.com/usn/usn-3253-1/"
},
{
"category": "external",
"summary": "GENTOO Security Advisory GLSA201710-20 vom 2017-10-18",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1629-1 vom 2024-05-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018519.html"
}
],
"source_lang": "en-US",
"title": "Nagios: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-05-13T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:08:50.308+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-1103",
"initial_release_date": "2016-12-15T23:00:00.000+00:00",
"revision_history": [
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-02-01T23:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2017-02-07T23:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2017-04-03T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2017-09-21T22:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2024-05-13T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.2.4",
"product": {
"name": "Open Source Nagios Core \u003c4.2.4",
"product_id": "T009061"
}
}
],
"category": "product_name",
"name": "Nagios Core"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack",
"product": {
"name": "Red Hat OpenStack",
"product_id": "T003522",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in der Komponente \"MagpieRSS\" aufgrund eines unvollst\u00e4ndigen Fix f\u00fcr CVE-2008-4796. Ein entfernter Angreifer kann beliebige Dateien lesen oder schreiben, indem er eine Antwort des Nagios RSS feed servers f\u00e4lscht und speziell manipuliert."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9565"
},
{
"cve": "CVE-2016-9566",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in [base/logging.c]. Der Nagios Daemon \u00f6ffnet seine Log-Datei bevor er die root Rechte beim Start aufgibt. Ein lokaler Angreifer aus der Gruppe \"nagios\" kann die Log-Datei durch einen Symlink auf eine beliebige Datei ersetzen, um dadurch root Rechte zu erlangen. In Kombination mit CVE-2016-9565 kann diese Schwachstelle auch von einem entfernten Angreifer ausgenutzt werden."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9566"
}
]
}
gsd-2016-9566
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-9566",
"description": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"id": "GSD-2016-9566",
"references": [
"https://www.suse.com/security/cve/CVE-2016-9566.html",
"https://access.redhat.com/errata/RHSA-2017:0259",
"https://access.redhat.com/errata/RHSA-2017:0258",
"https://access.redhat.com/errata/RHSA-2017:0214",
"https://access.redhat.com/errata/RHSA-2017:0213",
"https://access.redhat.com/errata/RHSA-2017:0212",
"https://access.redhat.com/errata/RHSA-2017:0211",
"https://ubuntu.com/security/CVE-2016-9566",
"https://advisories.mageia.org/CVE-2016-9566.html",
"https://alas.aws.amazon.com/cve/html/CVE-2016-9566.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-9566"
],
"details": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"id": "GSD-2016-9566",
"modified": "2023-12-13T01:21:21.457851Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9566",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "40921",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"name": "94919",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94919"
},
{
"name": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4",
"refsource": "CONFIRM",
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "GLSA-201612-51",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "[debian-lts-announce] 20181224 [SECURITY] [DLA 1615-1] nagios3 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "1037487",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037487"
},
{
"name": "20161215 Nagios Core \u003c 4.2.4 Root Privilege Escalation [CVE-2016-9566]",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"refsource": "MISC",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.2.3",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9566"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
},
{
"lang": "en",
"value": "CWE-59"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"name": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Patch"
],
"url": "https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"name": "94919",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94919"
},
{
"name": "20161215 Nagios Core \u003c 4.2.4 Root Privilege Escalation [CVE-2016-9566]",
"refsource": "FULLDISC",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/58"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "GLSA-201612-51",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201612-51"
},
{
"name": "1037487",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1037487"
},
{
"name": "40921",
"refsource": "EXPLOIT-DB",
"tags": [],
"url": "https://www.exploit-db.com/exploits/40921/"
},
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"name": "[debian-lts-announce] 20181224 [SECURITY] [DLA 1615-1] nagios3 security update",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2018-12-25T11:29Z",
"publishedDate": "2016-12-15T22:59Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…