netdata vulnerabilities (Debian)
14 vulnerabilities.
-
netdataDebian Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution 7.0 High -
netdataDebian Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent 6.5 Medium -
netdataDebian Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair 7.8 High -
netdataDebian Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE 8.4 High -
netdataDebian Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write 6.5 Medium -
netdataDebian Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK 6.5 Medium -
netdataDebian Netdata: WebSocket Decompression Bomb 7.5 High -
netdataDebian Netdata is vulnerable to improper authentication 6.5 Medium -
netdataDebian Netdata vulnerable to command injection 8.1 High -
netdataDebian An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx... 6.5 Medium -
netdataDebian An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data... 6.1 Medium -
netdataDebian An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a... 7.5 High -
netdataDebian ** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via... 5.3 Medium -
netdataDebian ** DISPUTED ** The Netdata web application through 1.13.0 allows remote attackers to inject their... 6.1 Medium