USN-3215-2
munin regression
USN-3215-1 fixed a vulnerability in Munin. The upstream patch caused a regression leading to errors being appended to the log file. This update fixes the problem.
Original advisory details:
It was discovered that Munin incorrectly handled CGI graphs. A remote attacker could use this issue to overwrite arbitrary files as the www-data user.
What each source reports
OSV No score
munin regression
USN-3215-1 fixed a vulnerability in Munin. The upstream patch caused a regression leading to errors being appended to the log file. This update fixes the problem.
Original advisory details:
It was discovered that Munin incorrectly handled CGI graphs. A remote attacker could use this issue to overwrite arbitrary files as the www-data user.
- Record
USN-3215-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
muninUbuntu:14.04:LTS |
before 2.0.19-3ubuntu0.3, plus listed versions 2.0.17-2ubuntu12.0.17-3ubuntu12.0.18-1ubuntu12.0.19-22.0.19-32.0.19-3ubuntu0.2 |
2.0.19-3ubuntu0.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3215-2 is a vulnerability with no CVSS score yet in munin, published March 3, 2017. No source lists public exploit code. Fixed in munin 2.0.19-3ubuntu0.3.