{"id":"CVE-2017-12847","aliases":["EUVD-2017-4384","GHSA-6j77-rprv-m39j","MGASA-2017-0437","UBUNTU-CVE-2017-12847","openSUSE-SU-2024:11073-1"],"status":"published","title":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root...","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","severity":{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00786,"percentile":0.56369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-665"],"published":"2017-08-23T21:00:00Z","modified":"2026-10-20T13:19:05Z","fixes":[{"ecosystem":"Mageia:6","package":"nagios","fixed_in":["4.3.1-2.1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2.1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nagios3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.1-1ubuntu4","3.5.1.dfsg-2ubuntu1","3.5.1.dfsg-2ubuntu2","3.5.1.dfsg-2.1ubuntu1","3.5.1.dfsg-2.1ubuntu1.1","3.5.1.dfsg-2.1ubuntu1.2","3.5.1.dfsg-2.1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nagios3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.1.dfsg-2.1ubuntu8"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-2.5"}]}],"bundled":17}],"products":[{"vendor":"nagios","product":"nagios"}],"references":[{"url":"https://security.gentoo.org/glsa/201710-20","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/NagiosEnterprises/nagioscore/commit/3baffa78bafebbbdf9f448890ba5a952ea2d73cb","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://github.com/NagiosEnterprises/nagioscore/commit/1b197346d490df2e2d3b1dcce5ac6134ad0c8752","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://github.com/NagiosEnterprises/nagioscore/blob/master/Changelog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/100403","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/NagiosEnterprises/nagioscore/issues/404","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12847"},{"url":"https://github.com/advisories/GHSA-6j77-rprv-m39j"},{"url":"https://advisories.mageia.org/MGASA-2017-0437.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22049","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WYI2Q2GXM5Z4DQCQSU2GUHC6AUDK7HK3/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-12847","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/08/16/7","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12847","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13977","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-12847","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2017-08-23T21:00:00Z","modified":"2024-08-05T18:51:06.962Z","updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-4384","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2017-08-23T21:00:00Z","modified":"2024-08-05T18:51:06Z","updated_at":"2026-11-03T02:23:20.155596Z"}],"ghsa":[{"id":"GHSA-6j77-rprv-m39j","title":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root...","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2022-05-13T01:42:46Z","modified":"2023-02-02T05:00:51Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:51:03.373063Z"}],"nvd":[{"id":"CVE-2017-12847","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2017-08-23T21:29:00.2Z","modified":"2026-06-17T01:04:01.23Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.3,"vector":"AV:L/AC:M/Au:N/C:N/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"CVE-2017-12847","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2017-08-23T21:29:00.2Z","modified":"2026-10-20T13:19:05.430285629Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"UBUNTU-CVE-2017-12847","description":"Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command.","status":"published","published":"2017-08-23T21:29:00Z","modified":"2025-10-24T04:46:27Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"MGASA-2017-0437","title":"Updated nagios packages fix security vulnerability","description":"It was found that nagios daemon creates its PID file after dropping\nprivileges, which allows to change its content by non-root user with PID\nof any other process, resulting into denial-of-service when daemon is\nstopped (CVE-2017-12847).\n\nNote that the nagios package on Mageia 5 is no longer supported.  Users\nof this package should upgrade to Mageia 6.\n","status":"published","published":"2017-12-01T23:13:21Z","modified":"2026-04-16T06:25:01.587076893Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:11073-1","title":"nagios-4.4.6-2.5 on GA media","description":"These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.000922Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}