{"kind": "product", "path": "vulns/debian-14/icinga2", "name": "icinga2", "product": "icinga2", "ecosystem": "Debian:14", "items": [{"id": "CVE-2026-61552", "noindex": false, "published": "2026-09-18T17:24:42.394Z", "modified": "2026-09-18T18:05:44.787Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00901, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61552", "title": "Icinga 2 DSL Injection via Unescaped Import Template Name", "description": "Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/* permission can inject Icinga 2 DSL configuration, escape the intended object, create additional objects, and exceed the user's assigned privileges. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-jgqj-x5j9-vgcm", "https://github.com/Icinga/icinga2/pull/10910", "https://github.com/Icinga/icinga2/commit/125b7734e84d03f09b79d36c270152b11629a8c5"], "fixes": ["2.16.2-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-61551", "noindex": false, "published": "2026-09-18T17:23:11.822Z", "modified": "2026-09-24T21:05:26.385Z", "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "severity": "high", "epss": 0.00941, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61551", "title": "Icinga 2: Stack overflow via deeply nested JSON objects", "description": "Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port 5665, allowing a remote attacker to crash the process, while possible code execution has not been demonstrated. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-wh38-wg57-5w7g", "https://github.com/Icinga/icinga2/pull/10908", "https://github.com/Icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee"], "fixes": ["2.16.2-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-61550", "noindex": false, "published": "2026-09-18T17:21:18.217Z", "modified": "2026-09-21T20:49:08.713Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.00674, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61550", "title": "Icinga 2: Improper access control for JSON-RPC update certificate messages", "description": "Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-vj39-ww8j-vvx5", "https://github.com/Icinga/icinga2/pull/10907", "https://github.com/Icinga/icinga2/commit/4b7fb3405f4616a24b2b55e20f603a56b7dd6ad0"], "fixes": ["2.16.2-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2025-61909", "noindex": false, "published": "2025-10-16T17:20:14.705Z", "modified": "2025-10-16T19:23:18.312Z", "cvss": 4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H", "severity": "medium", "epss": 0.00216, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61909", "title": "Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user", "description": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user, but send the signal as the root user. This can allow the Icinga user to send signals to processes it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46", "https://github.com/Icinga/icinga2/issues/10527", "https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587"], "fixes": ["2.15.1-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2025-61908", "noindex": false, "published": "2025-10-16T17:16:58.165Z", "modified": "2025-10-16T19:23:24.141Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00538, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61908", "title": "Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference", "description": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g", "https://github.com/Icinga/icinga2/pull/6521", "https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4"], "fixes": ["2.15.1-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2025-61907", "noindex": false, "published": "2025-10-16T17:11:59.338Z", "modified": "2025-10-16T19:23:30.055Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N", "severity": "high", "epss": 0.00404, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61907", "title": "Icinga 2 API users could access restricted values in filter expressions", "description": "Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v", "https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3", "https://nvd.nist.gov/vuln/detail/CVE-2025-61907"], "fixes": ["2.15.1-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2025-48057", "noindex": false, "published": "2025-05-27T16:32:29.931Z", "modified": "2025-05-27T18:27:57.002Z", "cvss": 9.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "severity": "critical", "epss": 0.00462, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-48057", "title": "Icinga 2 certificate renewal might incorrectly renew an invalid certificate", "description": "Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in v", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6", "https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152", "https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb"], "fixes": ["2.14.6-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2024-49369", "noindex": false, "published": "2024-11-12T16:44:01.713Z", "modified": "2025-11-03T22:22:15.314Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.02915, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-49369", "title": "Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-j7wq-r9mg-9wpv", "https://github.com/Icinga/icinga2/commit/0419a2c36de408e9a703aec0962061ec9a285d3c", "https://github.com/Icinga/icinga2/commit/2febc5e18ae0c93d989e64ebc2a9fd90e7205ad8"], "fixes": ["2.14.3-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-37698", "noindex": false, "published": "2021-08-19T13:55:10.000Z", "modified": "2025-11-03T21:45:10.788Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.01381, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-37698", "title": "Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate despite a certificate authority being specified. Icinga 2 instances which connect to any of the mentioned time series databases (TSDBs) using TLS over a spoofable infrastructure should immediately upgrade to version 2.13.1, 2.12.6, or 2.11.11 to patch the issue. Such instances should also change the credentials (if any) used by the TSDB writer feature ", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2", "https://github.com/Icinga/icinga2/releases/tag/v2.11.11", "https://github.com/Icinga/icinga2/releases/tag/v2.12.6"], "fixes": ["2.13.1-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-32743", "noindex": false, "published": "2021-07-15T16:05:12.000Z", "modified": "2025-11-03T21:44:46.082Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01803, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32743", "title": "Passwords used to access external services inadvertently exposed through API", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for external services expose those credentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlConnection and IdoPgsqlConnection (every released version) exposes the password of the user used to connect to the database. IcingaDB (added in 2.12.0) exposes the password used to connect to the Redis serve", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7", "https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/", "https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html"], "fixes": ["2.12.5-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-32739", "noindex": false, "published": "2021-07-15T14:55:11.000Z", "modified": "2025-11-03T21:44:44.603Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0114, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32739", "title": "Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user's credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node's certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That ce", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-98wp-jc6q-x5q5", "https://icinga.com/blog/2021/07/02/releasing-icinga-2-12-5-2-11-10/", "https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html"], "fixes": ["2.12.5-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2020-29663", "noindex": false, "published": "2020-12-15T22:15:35.000Z", "modified": "2024-08-04T16:55:10.629Z", "cvss": 9.1, "cvss_vector": "", "severity": "critical", "epss": 0.01573, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-29663", "title": "CVE-2020-29663", "description": "Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.", "references": ["https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2", "https://github.com/Icinga/icinga2/security/advisories/GHSA-pcmr-2p2f-r7j6", "https://nvd.nist.gov/vuln/detail/CVE-2020-29663"], "fixes": ["2.12.3-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2020-14004", "noindex": false, "published": "2020-06-12T15:04:10.000Z", "modified": "2024-08-04T12:32:14.733Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00739, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-14004", "title": "CVE-2020-14004", "description": "An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.", "references": ["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004", "https://github.com/Icinga/icinga2/pull/8045/commits/2f0f2e8c355b75fa4407d23f85feea037d2bc4b6", "https://github.com/Icinga/icinga2/releases"], "fixes": ["2.11.5-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2018-6535", "noindex": false, "published": "2018-02-27T19:00:00.000Z", "modified": "2024-08-05T06:10:10.158Z", "cvss": 8.1, "cvss_vector": "", "severity": "high", "epss": 0.01329, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6535", "title": "CVE-2018-6535", "description": "An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time password comparison function can disclose the password to an attacker.", "references": ["https://github.com/Icinga/icinga2/pull/5715", "https://github.com/Icinga/icinga2/issues/4920", "https://nvd.nist.gov/vuln/detail/CVE-2018-6535"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2018-6534", "noindex": false, "published": "2018-02-27T19:00:00.000Z", "modified": "2024-08-05T06:10:10.126Z", "cvss": 6.5, "cvss_vector": "", "severity": "medium", "epss": 0.01078, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6534", "title": "CVE-2018-6534", "description": "An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which can cause the product to crash.", "references": ["https://github.com/Icinga/icinga2/pull/6104", "https://nvd.nist.gov/vuln/detail/CVE-2018-6534"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2018-6533", "noindex": false, "published": "2018-02-27T19:00:00.000Z", "modified": "2024-08-05T06:10:10.143Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00392, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6533", "title": "CVE-2018-6533", "description": "An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run arbitrary code as root. This was fixed by no longer using init.conf to determine account information for any root-executed code (a larger issue than CVE-2017-16933).", "references": ["https://github.com/Icinga/icinga2/pull/5850", "https://nvd.nist.gov/vuln/detail/CVE-2018-6533"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2018-6532", "noindex": false, "published": "2018-02-27T19:00:00.000Z", "modified": "2024-08-05T06:10:10.130Z", "cvss": 7.5, "cvss_vector": "", "severity": "high", "epss": 0.01363, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6532", "title": "CVE-2018-6532", "description": "An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhaust a lot of memory on the server side, triggering the OOM killer.", "references": ["https://github.com/Icinga/icinga2/pull/6103", "https://nvd.nist.gov/vuln/detail/CVE-2018-6532"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2018-6536", "noindex": false, "published": "2018-02-02T09:00:00.000Z", "modified": "2024-08-05T06:10:10.303Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00257, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6536", "title": "CVE-2018-6536", "description": "An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a \"kill `cat /pathname/icinga2.pid`\" command, as demonstrated by icinga2.init.d.cmake.", "references": ["https://github.com/Icinga/icinga2/issues/5991", "https://nvd.nist.gov/vuln/detail/CVE-2018-6536"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}, {"id": "CVE-2017-16933", "noindex": false, "published": "2017-11-24T05:00:00.000Z", "modified": "2024-08-05T20:43:59.496Z", "cvss": 7, "cvss_vector": "", "severity": "high", "epss": 0.00305, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2017-16933", "title": "CVE-2017-16933", "description": "etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.", "references": ["https://github.com/Icinga/icinga2/issues/5793", "https://nvd.nist.gov/vuln/detail/CVE-2017-16933"], "fixes": ["2.8.4-1"], "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}]}], "total": 19, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 1, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "icinga2", "path": "vulns/debian-14/icinga2", "ecosystem": "Debian:14"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-09-24T21:05:26.385Z", "early_advisories": [], "license": "Vous pouvez librement utiliser la sélection de PatchFirst et nos ajouts (priorités, alertes précoces, textes, synthèses et agrégats) pour vos propres besoins, y compris les activités internes de votre entreprise. La revente, la distribution commerciale et la mise en miroir massive de cette sélection ou de ces ajouts nécessitent un accord écrit avec l’opérateur. Lors de toute utilisation ou publication de la sélection ou de nos ajouts, citez PatchFirst (https://patchfirst.dev/vulns/) avec ce lien vers la page du flux de votre région. Les enregistrements originaux des sources ouvertes restent soumis à leurs licences et conditions respectives. Ces conditions ne limitent pas vos droits sur les données originales, que vous pouvez obtenir directement auprès de ces sources.", "terms_url": "https://patchfirst.dev/fr/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst sélectionne, normalise et combine les enregistrements ; des synthèses et des traductions peuvent être ajoutées. Les actualités sont accompagnées d’un lien vers la source originale dans chaque entrée.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Les licences des bases d’origine varient ; voir le catalogue des sources."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Évaluations publiques gratuites ; mention de la source demandée (FIRST EPSS, évaluations produites par Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}