opensuse-su-2024:11073-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
nagios-4.4.6-2.5 on GA media
Notes
Title of the patch
nagios-4.4.6-2.5 on GA media
Description of the patch
These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11073
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "nagios-4.4.6-2.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11073",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11073-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-2162 page",
"url": "https://www.suse.com/security/cve/CVE-2006-2162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2007-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4796 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1523 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2214 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4214 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-7108 page",
"url": "https://www.suse.com/security/cve/CVE-2013-7108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1878 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0726 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6209 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8641 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9566 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12847 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13441 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18245 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-13977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-13977/"
}
],
"title": "nagios-4.4.6-2.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11073-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-4.4.6-2.5.aarch64",
"product_id": "nagios-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-contrib-4.4.6-2.5.aarch64",
"product_id": "nagios-contrib-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-devel-4.4.6-2.5.aarch64",
"product_id": "nagios-devel-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-www-4.4.6-2.5.aarch64",
"product_id": "nagios-www-4.4.6-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.aarch64",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.aarch64",
"product_id": "nagios-www-dch-4.4.6-2.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-4.4.6-2.5.ppc64le",
"product_id": "nagios-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-contrib-4.4.6-2.5.ppc64le",
"product_id": "nagios-contrib-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-devel-4.4.6-2.5.ppc64le",
"product_id": "nagios-devel-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-www-4.4.6-2.5.ppc64le",
"product_id": "nagios-www-4.4.6-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.ppc64le",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.ppc64le",
"product_id": "nagios-www-dch-4.4.6-2.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.s390x",
"product": {
"name": "nagios-4.4.6-2.5.s390x",
"product_id": "nagios-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.s390x",
"product": {
"name": "nagios-contrib-4.4.6-2.5.s390x",
"product_id": "nagios-contrib-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.s390x",
"product": {
"name": "nagios-devel-4.4.6-2.5.s390x",
"product_id": "nagios-devel-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.s390x",
"product": {
"name": "nagios-www-4.4.6-2.5.s390x",
"product_id": "nagios-www-4.4.6-2.5.s390x"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.s390x",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.s390x",
"product_id": "nagios-www-dch-4.4.6-2.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-4.4.6-2.5.x86_64",
"product_id": "nagios-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-contrib-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-contrib-4.4.6-2.5.x86_64",
"product_id": "nagios-contrib-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-devel-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-devel-4.4.6-2.5.x86_64",
"product_id": "nagios-devel-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"product_id": "nagios-theme-exfoliation-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-www-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-www-4.4.6-2.5.x86_64",
"product_id": "nagios-www-4.4.6-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "nagios-www-dch-4.4.6-2.5.x86_64",
"product": {
"name": "nagios-www-dch-4.4.6-2.5.x86_64",
"product_id": "nagios-www-dch-4.4.6-2.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x"
},
"product_reference": "nagios-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-contrib-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-contrib-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x"
},
"product_reference": "nagios-contrib-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-contrib-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-contrib-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-devel-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-devel-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x"
},
"product_reference": "nagios-devel-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-devel-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-theme-exfoliation-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-www-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-www-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x"
},
"product_reference": "nagios-www-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-www-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-www-dch-4.4.6-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
},
"product_reference": "nagios-www-dch-4.4.6-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-2162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-2162"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-2162",
"url": "https://www.suse.com/security/cve/CVE-2006-2162"
},
{
"category": "external",
"summary": "SUSE Bug 140494 for CVE-2006-2162",
"url": "https://bugzilla.suse.com/140494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-2162"
},
{
"cve": "CVE-2007-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-5803"
}
],
"notes": [
{
"category": "general",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-5803",
"url": "https://www.suse.com/security/cve/CVE-2007-5803"
},
{
"category": "external",
"summary": "SUSE Bug 339447 for CVE-2007-5803",
"url": "https://bugzilla.suse.com/339447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-5803"
},
{
"cve": "CVE-2008-4796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4796"
}
],
"notes": [
{
"category": "general",
"text": "The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4796",
"url": "https://www.suse.com/security/cve/CVE-2008-4796"
},
{
"category": "external",
"summary": "SUSE Bug 1015744 for CVE-2008-4796",
"url": "https://bugzilla.suse.com/1015744"
},
{
"category": "external",
"summary": "SUSE Bug 1016483 for CVE-2008-4796",
"url": "https://bugzilla.suse.com/1016483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-4796"
},
{
"cve": "CVE-2011-1523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1523"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1523",
"url": "https://www.suse.com/security/cve/CVE-2011-1523"
},
{
"category": "external",
"summary": "SUSE Bug 682966 for CVE-2011-1523",
"url": "https://bugzilla.suse.com/682966"
},
{
"category": "external",
"summary": "SUSE Bug 697895 for CVE-2011-1523",
"url": "https://bugzilla.suse.com/697895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-1523"
},
{
"cve": "CVE-2013-2214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2214"
}
],
"notes": [
{
"category": "general",
"text": "status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup (1) overview, (2) summary, or (3) grid style in status.cgi. NOTE: this behavior is by design in most 3.x versions, but the upstream vendor \"decided to change it for Nagios 4\" and 3.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2214",
"url": "https://www.suse.com/security/cve/CVE-2013-2214"
},
{
"category": "external",
"summary": "SUSE Bug 827020 for CVE-2013-2214",
"url": "https://bugzilla.suse.com/827020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-2214"
},
{
"cve": "CVE-2013-4214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4214"
}
],
"notes": [
{
"category": "general",
"text": "rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4214",
"url": "https://www.suse.com/security/cve/CVE-2013-4214"
},
{
"category": "external",
"summary": "SUSE Bug 845536 for CVE-2013-4214",
"url": "https://bugzilla.suse.com/845536"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4214"
},
{
"cve": "CVE-2013-7108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-7108"
}
],
"notes": [
{
"category": "general",
"text": "Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/, which triggers a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-7108",
"url": "https://www.suse.com/security/cve/CVE-2013-7108"
},
{
"category": "external",
"summary": "SUSE Bug 856837 for CVE-2013-7108",
"url": "https://bugzilla.suse.com/856837"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-7108"
},
{
"cve": "CVE-2014-1878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1878"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1878",
"url": "https://www.suse.com/security/cve/CVE-2014-1878"
},
{
"category": "external",
"summary": "SUSE Bug 864843 for CVE-2014-1878",
"url": "https://bugzilla.suse.com/864843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1878"
},
{
"cve": "CVE-2016-0726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0726"
}
],
"notes": [
{
"category": "general",
"text": "The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0726",
"url": "https://www.suse.com/security/cve/CVE-2016-0726"
},
{
"category": "external",
"summary": "SUSE Bug 961115 for CVE-2016-0726",
"url": "https://bugzilla.suse.com/961115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-0726"
},
{
"cve": "CVE-2016-6209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6209"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Nagios.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6209",
"url": "https://www.suse.com/security/cve/CVE-2016-6209"
},
{
"category": "external",
"summary": "SUSE Bug 989759 for CVE-2016-6209",
"url": "https://bugzilla.suse.com/989759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-6209"
},
{
"cve": "CVE-2016-8641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8641"
}
],
"notes": [
{
"category": "general",
"text": "A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It\u0027s possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8641",
"url": "https://www.suse.com/security/cve/CVE-2016-8641"
},
{
"category": "external",
"summary": "SUSE Bug 1011630 for CVE-2016-8641",
"url": "https://bugzilla.suse.com/1011630"
},
{
"category": "external",
"summary": "SUSE Bug 1018047 for CVE-2016-8641",
"url": "https://bugzilla.suse.com/1018047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8641"
},
{
"cve": "CVE-2016-9566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9566"
}
],
"notes": [
{
"category": "general",
"text": "base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9566",
"url": "https://www.suse.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "SUSE Bug 1014637 for CVE-2016-9566",
"url": "https://bugzilla.suse.com/1014637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9566"
},
{
"cve": "CVE-2017-12847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12847"
}
],
"notes": [
{
"category": "general",
"text": "Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12847",
"url": "https://www.suse.com/security/cve/CVE-2017-12847"
},
{
"category": "external",
"summary": "SUSE Bug 1054163 for CVE-2017-12847",
"url": "https://bugzilla.suse.com/1054163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12847"
},
{
"cve": "CVE-2018-13441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13441"
}
],
"notes": [
{
"category": "general",
"text": "qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13441",
"url": "https://www.suse.com/security/cve/CVE-2018-13441"
},
{
"category": "external",
"summary": "SUSE Bug 1101293 for CVE-2018-13441",
"url": "https://bugzilla.suse.com/1101293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13441"
},
{
"cve": "CVE-2018-18245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18245"
}
],
"notes": [
{
"category": "general",
"text": "Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18245",
"url": "https://www.suse.com/security/cve/CVE-2018-18245"
},
{
"category": "external",
"summary": "SUSE Bug 1119832 for CVE-2018-18245",
"url": "https://bugzilla.suse.com/1119832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18245"
},
{
"cve": "CVE-2019-3698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3698"
}
],
"notes": [
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3698",
"url": "https://www.suse.com/security/cve/CVE-2019-3698"
},
{
"category": "external",
"summary": "SUSE Bug 1150550 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1150550"
},
{
"category": "external",
"summary": "SUSE Bug 1156309 for CVE-2019-3698",
"url": "https://bugzilla.suse.com/1156309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3698"
},
{
"cve": "CVE-2020-13977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-13977"
}
],
"notes": [
{
"category": "general",
"text": "Nagios 4.4.5 allows an attacker, who already has administrative access to change the \"URL for JSON CGIs\" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-13977",
"url": "https://www.suse.com/security/cve/CVE-2020-13977"
},
{
"category": "external",
"summary": "SUSE Bug 1172794 for CVE-2020-13977",
"url": "https://bugzilla.suse.com/1172794"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:nagios-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-devel-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-4.4.6-2.5.x86_64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.aarch64",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.ppc64le",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.s390x",
"openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-13977"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…