{"kind": "product", "path": "vulns/ubuntu-16.04-lts/icinga2", "name": "icinga2", "product": "icinga2", "ecosystem": "Ubuntu:16.04:LTS", "items": [{"id": "CVE-2026-61552", "noindex": false, "published": "2026-09-18T17:24:42.394Z", "modified": "2026-09-18T18:05:44.787Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00901, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61552", "title": "Icinga 2 DSL Injection via Unescaped Import Template Name", "description": "Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/* permission can inject Icinga 2 DSL configuration, escape the intended object, create additional objects, and exceed the user's assigned privileges. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-jgqj-x5j9-vgcm", "https://github.com/Icinga/icinga2/pull/10910", "https://github.com/Icinga/icinga2/commit/125b7734e84d03f09b79d36c270152b11629a8c5"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-61551", "noindex": false, "published": "2026-09-18T17:23:11.822Z", "modified": "2026-09-24T21:05:26.385Z", "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "severity": "high", "epss": 0.00941, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61551", "title": "Icinga 2: Stack overflow via deeply nested JSON objects", "description": "Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port 5665, allowing a remote attacker to crash the process, while possible code execution has not been demonstrated. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-wh38-wg57-5w7g", "https://github.com/Icinga/icinga2/pull/10908", "https://github.com/Icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-61550", "noindex": false, "published": "2026-09-18T17:21:18.217Z", "modified": "2026-09-21T20:49:08.713Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.00674, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-61550", "title": "Icinga 2: Improper access control for JSON-RPC update certificate messages", "description": "Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-vj39-ww8j-vvx5", "https://github.com/Icinga/icinga2/pull/10907", "https://github.com/Icinga/icinga2/commit/4b7fb3405f4616a24b2b55e20f603a56b7dd6ad0"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-24413", "noindex": false, "published": "2026-01-29T17:21:01.438Z", "modified": "2026-01-29T21:23:20.671Z", "cvss": 6.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00078, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-24413", "title": "Icinga has insecure permission of %ProgramData%\\icinga2\\var on Windows", "description": "Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the `%ProgramData%\\icinga2\\var` folder on Windows. This resulted in the its contents - including the private key of the user and synced configuration - being readable by all local users. All installations on Windows are affected. Versions 2.13.14, 2.14.8, and 2.15.2 contains a fix. There are two possibilities to work around the issue without upgrading Icinga 2. Upgrade Icinga for Windows to at least version v1.13.4, v1.12.4, or v1.11.2. These version will automatica", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr", "https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973", "https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-61909", "noindex": false, "published": "2025-10-16T17:20:14.705Z", "modified": "2025-10-16T19:23:18.312Z", "cvss": 4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H", "severity": "medium", "epss": 0.00216, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61909", "title": "Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user", "description": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user, but send the signal as the root user. This can allow the Icinga user to send signals to processes it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46", "https://github.com/Icinga/icinga2/issues/10527", "https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-61908", "noindex": false, "published": "2025-10-16T17:16:58.165Z", "modified": "2025-10-16T19:23:24.141Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00538, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61908", "title": "Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference", "description": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g", "https://github.com/Icinga/icinga2/pull/6521", "https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-61907", "noindex": false, "published": "2025-10-16T17:11:59.338Z", "modified": "2025-10-16T19:23:30.055Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N", "severity": "high", "epss": 0.00404, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61907", "title": "Icinga 2 API users could access restricted values in filter expressions", "description": "Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v", "https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3", "https://nvd.nist.gov/vuln/detail/CVE-2025-61907"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-48057", "noindex": false, "published": "2025-05-27T16:32:29.931Z", "modified": "2025-05-27T18:27:57.002Z", "cvss": 9.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "severity": "critical", "epss": 0.00462, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-48057", "title": "Icinga 2 certificate renewal might incorrectly renew an invalid certificate", "description": "Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in v", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6", "https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152", "https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-49369", "noindex": false, "published": "2024-11-12T16:44:01.713Z", "modified": "2025-11-03T22:22:15.314Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.02915, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-49369", "title": "Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12.", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-j7wq-r9mg-9wpv", "https://github.com/Icinga/icinga2/commit/0419a2c36de408e9a703aec0962061ec9a285d3c", "https://github.com/Icinga/icinga2/commit/2febc5e18ae0c93d989e64ebc2a9fd90e7205ad8"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2022-24795", "noindex": false, "published": "2022-04-05T00:00:00.000Z", "modified": "2025-04-22T18:17:37.564Z", "cvss": 5.9, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.03472, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-24795", "title": "Buffer Overflow and Integer Overflow in yajl-ruby", "description": "yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf->alloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue", "references": ["https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm", "https://github.com/brianmario/yajl-ruby/commit/7168bd79b888900aa94523301126f968a93eb3a6", "https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-37698", "noindex": false, "published": "2021-08-19T13:55:10.000Z", "modified": "2025-11-03T21:45:10.788Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.01381, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-37698", "title": "Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate despite a certificate authority being specified. Icinga 2 instances which connect to any of the mentioned time series databases (TSDBs) using TLS over a spoofable infrastructure should immediately upgrade to version 2.13.1, 2.12.6, or 2.11.11 to patch the issue. Such instances should also change the credentials (if any) used by the TSDB writer feature ", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2", "https://github.com/Icinga/icinga2/releases/tag/v2.11.11", "https://github.com/Icinga/icinga2/releases/tag/v2.12.6"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-32743", "noindex": false, "published": "2021-07-15T16:05:12.000Z", "modified": "2025-11-03T21:44:46.082Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01803, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32743", "title": "Passwords used to access external services inadvertently exposed through API", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for external services expose those credentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlConnection and IdoPgsqlConnection (every released version) exposes the password of the user used to connect to the database. IcingaDB (added in 2.12.0) exposes the password used to connect to the Redis serve", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7", "https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/", "https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-32739", "noindex": false, "published": "2021-07-15T14:55:11.000Z", "modified": "2025-11-03T21:44:44.603Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0114, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32739", "title": "Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities", "description": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user's credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node's certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That ce", "references": ["https://github.com/Icinga/icinga2/security/advisories/GHSA-98wp-jc6q-x5q5", "https://icinga.com/blog/2021/07/02/releasing-icinga-2-12-5-2-11-10/", "https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-29663", "noindex": false, "published": "2020-12-15T22:15:35.000Z", "modified": "2024-08-04T16:55:10.629Z", "cvss": 9.1, "cvss_vector": "", "severity": "critical", "epss": 0.01573, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-29663", "title": "CVE-2020-29663", "description": "Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.", "references": ["https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2", "https://github.com/Icinga/icinga2/security/advisories/GHSA-pcmr-2p2f-r7j6", "https://nvd.nist.gov/vuln/detail/CVE-2020-29663"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-14004", "noindex": false, "published": "2020-06-12T15:04:10.000Z", "modified": "2024-08-04T12:32:14.733Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00739, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-14004", "title": "CVE-2020-14004", "description": "An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.", "references": ["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004", "https://github.com/Icinga/icinga2/pull/8045/commits/2f0f2e8c355b75fa4407d23f85feea037d2bc4b6", "https://github.com/Icinga/icinga2/releases"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2018-6536", "noindex": false, "published": "2018-02-02T09:00:00.000Z", "modified": "2024-08-05T06:10:10.303Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00257, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-6536", "title": "CVE-2018-6536", "description": "An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a \"kill `cat /pathname/icinga2.pid`\" command, as demonstrated by icinga2.init.d.cmake.", "references": ["https://github.com/Icinga/icinga2/issues/5991", "https://nvd.nist.gov/vuln/detail/CVE-2018-6536"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2017-16933", "noindex": false, "published": "2017-11-24T05:00:00.000Z", "modified": "2024-08-05T20:43:59.496Z", "cvss": 7, "cvss_vector": "", "severity": "high", "epss": 0.00305, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2017-16933", "title": "CVE-2017-16933", "description": "etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.", "references": ["https://github.com/Icinga/icinga2/issues/5793", "https://nvd.nist.gov/vuln/detail/CVE-2017-16933"], "fixes": [], "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}]}], "total": 17, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 1, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "icinga2", "path": "vulns/ubuntu-16.04-lts/icinga2", "ecosystem": "Ubuntu:16.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-09-24T21:05:26.385Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}