Skip to content

CVE-2016-9565

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote...

9.8 CriticalPublic exploit

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

22.7%Up 4.4 points since Feb 4, 2022

What each source reports

NVD Score used 9.8

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: CVE-2016-9565
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-284
Updated: 2026-11-02

CVE List No score

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: CVE-2016-9565
Updated: 2026-11-02

EUVDEUVD-2016-10371 No score

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: EUVD-2016-10371
Updated: 2026-11-03

GitHub AdvisoriesGHSA-828p-3vwg-wc22 9.8

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote...

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: GHSA-828p-3vwg-wc22
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-284
Updated: 2026-11-02

OSV 9.8

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: CVE-2016-9565
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0211 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0211
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSVRHSA-2017:0212 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0212
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0213 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0213
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0214 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0214
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0258 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0258
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0259 8.1

Red Hat Security Advisory: nagios security update

Record: RHSA-2017:0259
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-9565 9.8

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Record: UBUNTU-CVE-2016-9565
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2017-0045 No score

Updated nagios packages fix security vulnerabilities

The nagios package has been patched to fix the following issues:

Improper sanitization of RSS feed input enables unauthenticated remote read and write of arbitrary files (CVE-2016-9565).

Unsafe logfile handling allows unprivileged users to escalate their privileges to root (CVE-2016-9566).

Record: MGASA-2017-0045
Updated: 2026-11-02

Affected products

nagios

Affected packages

Affected packages
Package	Affected	Fixed
`nagios3` Debian:7 From an advisory covering 2 CVEs	before 3.4.1-3+deb7u3, plus listed versions 3.4.1-33.4.1-3+deb7u13.4.1-3+deb7u2	3.4.1-3+deb7u3
`nagios` Mageia:5 From an advisory covering 2 CVEs	before 4.0.8-3.1.mga5	4.0.8-3.1.mga5
`nagios` Red Hat:openstack:5::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-common` Red Hat:openstack:5::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-debuginfo` Red Hat:openstack:5::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-devel` Red Hat:openstack:5::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios` Red Hat:openstack:5::el6 From an advisory covering 5 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-common` Red Hat:openstack:5::el6 From an advisory covering 5 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-debuginfo` Red Hat:openstack:5::el6 From an advisory covering 5 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-devel` Red Hat:openstack:5::el6 From an advisory covering 5 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6

Show 19 moreShow less

Affected packages
Package	Affected	Fixed
`nagios` Red Hat:openstack:6::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-common` Red Hat:openstack:6::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-debuginfo` Red Hat:openstack:6::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios` Red Hat:openstack:7::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-common` Red Hat:openstack:7::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-debuginfo` Red Hat:openstack:7::el7 From an advisory covering 5 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios` Red Hat:storage:3.1:nagios:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-common` Red Hat:storage:3.1:nagios:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-debuginfo` Red Hat:storage:3.1:nagios:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios` Red Hat:storage:3.1:server:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-common` Red Hat:storage:3.1:server:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios-debuginfo` Red Hat:storage:3.1:server:el7 From an advisory covering 2 CVEs	before 0:3.5.1-9.el7	0:3.5.1-9.el7
`nagios` Red Hat:storage:3.1:nagios:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-common` Red Hat:storage:3.1:nagios:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-debuginfo` Red Hat:storage:3.1:nagios:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-devel` Red Hat:storage:3.1:nagios:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios` Red Hat:storage:3.1:server:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-common` Red Hat:storage:3.1:server:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6
`nagios-debuginfo` Red Hat:storage:3.1:server:el6 From an advisory covering 2 CVEs	before 0:3.5.1-9.el6	0:3.5.1-9.el6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Nagios < 4.2.2 - Arbitrary Code Execution	2016-12-15

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-9565 is a critical vulnerability (CVSS 9.8) in Nagios, published December 15, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.7%, the 97th percentile. No source names a fixed version.

References

Show 49 moreShow less