icinga2 vulnerabilities (Ubuntu)
17 vulnerabilities.
-
icinga2Ubuntu Icinga 2 DSL Injection via Unescaped Import Template Name 7.2 High -
icinga2Ubuntu Icinga 2: Stack overflow via deeply nested JSON objects 8.6 High -
icinga2Ubuntu Icinga 2: Improper access control for JSON-RPC update certificate messages 9.8 Critical -
icinga2Ubuntu Icinga has insecure permission of %ProgramData%\icinga2\var on Windows 6.8 Medium -
icinga2Ubuntu Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user 4.0 Medium -
icinga2Ubuntu Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference 7.1 High -
icinga2Ubuntu Icinga 2 API users could access restricted values in filter expressions 7.1 High -
icinga2Ubuntu Icinga 2 certificate renewal might incorrectly renew an invalid certificate 9.3 Critical -
icinga2Ubuntu Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections 9.8 Critical -
icinga2Ubuntu Buffer Overflow and Integer Overflow in yajl-ruby 5.9 Medium -
icinga2Ubuntu Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer 7.5 High -
icinga2Ubuntu Passwords used to access external services inadvertently exposed through API 8.8 High -
icinga2Ubuntu Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities 8.8 High -
icinga2Ubuntu Security update for icinga2 9.1 Critical -
icinga2Ubuntu An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of... 7.8 High -
icinga2Ubuntu An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after... 5.5 Medium -
icinga2Ubuntu etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user... 7.0 High