Nagios 3.5.1
Approved changes feed: RSS · Atom
cpe:2.3:a:nagios:nagios:3.5.1:*:*:*:*:*:*:*
part: a version: 3.5.1 update: *
| Vendor | Nagios (7fb1328e-019e-51f8-8fa9-c12efadd1bbe) |
|---|---|
| Product | Nagios (50575199-1514-50c1-89a9-fe9479fd126c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nagios4 |
purl2cpe | 2026-06-01 10:14:43.822990 |
pkg:deb/ubuntu/nagios4 |
purl2cpe | 2026-06-01 10:14:43.822991 |
pkg:github/nagiosenterprises/nagioscore |
purl2cpe | 2026-06-01 10:14:43.822993 |
pkg:rpm/fedora/nagios |
purl2cpe | 2026-06-01 10:14:43.822994 |
pkg:rpm/opensuse/nagios |
purl2cpe | 2026-06-01 10:14:43.822996 |
pkg:sourceforge/nagios |
purl2cpe | 2026-06-01 10:14:43.822997 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-7205 |
vulnerable | 2026-06-03 14:33:34.193836 |
Details available
Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.
Published: 2014-01-14T18:00:00.000Z
Updated: 2024-08-06T18:01:20.131Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7108 |
vulnerable | 2026-06-03 14:33:34.034841 |
Details available
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/, which triggers a heap-based buffer over-read.
Published: 2014-01-14T18:00:00.000Z
Updated: 2024-08-06T18:01:19.334Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.