CVE-2013-6359
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service ...
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
Exploit likelihood
What each source reports
NVD Score used
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
CVE-2013-6359- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
CVE-2013-6359- Updated
- 2026-11-02
EUVDEUVD-2013-6184 No score
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
EUVD-2013-6184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f92f-4f5p-xhfm No score
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service ...
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
GHSA-f92f-4f5p-xhfm- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
CVE-2013-6359- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6359 No score
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name.
- Record
DEBIAN-CVE-2013-6359- Updated
- 2026-11-02
OSVMGASA-2013-0378 No score
Updated munin packages fixes two security vulnerabilities
Updated munin packages fix security vulnerabilities:
The Munin::Master::Node module of munin does not properly validate certain data a node sends. A malicious node might exploit this to drive the munin-html process into an infinite loop with memory exhaustion on the munin master (CVE-2013-6048).
A malicious node, with a plugin enabled using "multigraph" as a multigraph service name, can abort data collection for the entire node the plugin runs on (CVE-2013-6359).
- Record
MGASA-2013-0378- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10330-1 No score
munin-2.0.25-4.10 on GA media
These are all security issues fixed in the munin-2.0.25-4.10 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10330-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
muninDebian:12 |
before 2.0.18-1 | 2.0.18-1 |
muninDebian:13 |
before 2.0.18-1 | 2.0.18-1 |
muninDebian:14 |
before 2.0.18-1 | 2.0.18-1 |
muninDebian:6.0 From an advisory covering 3 CVEs |
before 1.4.5-3+deb6u1, plus listed versions 1.4.5-3 |
1.4.5-3+deb6u1 |
muninDebian:7 From an advisory covering 2 CVEs |
before 2.0.6-4+deb7u2, plus listed versions 2.0.6-42.0.6-4+deb7u12.0.6-4+deb7u1~bpo60+12.0.6-4+deb7u2~bpo60+1 |
2.0.6-4+deb7u2 |
muninMageia:3 From an advisory covering 2 CVEs |
before 2.0.12-2.1.mga3 | 2.0.12-2.1.mga3 |
muninopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 2.0.25-4.10 | 2.0.25-4.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6359 is a medium vulnerability (CVSS 4.3) in Munin-monitoring Munin, published December 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. Fixed in munin 2.0.18-1.