icinga2 vulnerabilities (Debian)
19 vulnerabilities.
-
icinga2Debian Icinga 2 DSL Injection via Unescaped Import Template Name 7.2 High -
icinga2Debian Icinga 2: Stack overflow via deeply nested JSON objects 8.6 High -
icinga2Debian Icinga 2: Improper access control for JSON-RPC update certificate messages 9.8 Critical -
icinga2Debian Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user 4.0 Medium -
icinga2Debian Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference 7.1 High -
icinga2Debian Icinga 2 API users could access restricted values in filter expressions 7.1 High -
icinga2Debian Icinga 2 certificate renewal might incorrectly renew an invalid certificate 9.3 Critical -
icinga2Debian Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections 9.8 Critical -
icinga2Debian Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer 7.5 High -
icinga2Debian Passwords used to access external services inadvertently exposed through API 8.8 High -
icinga2Debian Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities 8.8 High -
icinga2Debian Security update for icinga2 9.1 Critical -
icinga2Debian An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of... 7.8 High -
icinga2Debian An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time password... 8.1 High -
icinga2Debian An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an... 6.5 Medium -
icinga2Debian An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can... 7.8 High -
icinga2Debian An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated... 7.5 High -
icinga2Debian An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after... 5.5 Medium -
icinga2Debian etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user... 7.0 High