Stack-Based Buffer Overflow in Nagios Core and Icinga Server
CVE-2014-1878

Currently unrated

Key Information:

Vendor: Icinga
Status: Icinga; Nagios
Vendor: CVE Published:; 28 February 2014

What is CVE-2014-1878?

A stack-based buffer overflow vulnerability exists in the cmd_submitf function in the Nagios Core and Icinga server software. This flaw allows remote attackers to send a specially crafted long message to cmd.cgi, potentially resulting in a denial of service due to segmentation faults. Versions of Nagios Core up to 4.0.3rc1 and Icinga versions prior to 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 are affected. Proper validation and handling of input messages can mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch