CVE-2018-6532
CVE-2018-6532
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhaust a lot of memory on the server side, triggering the OOM killer.
CVSS 7.5 · High · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
icinga2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.8.4-1
Update to 2.8.4-1
icinga2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.8.4-1
Update to 2.8.4-1
icinga2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.8.4-1
Update to 2.8.4-1
icinga Ubuntu:16.04:LTS
- Versions
- 1.13.3-1
- 1.13.3-2
- 1.13.3-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
icinga Ubuntu:18.04:LTS
- Versions
- 1.13.4-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published