An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhaust a lot of memory on the server side, triggering the OOM killer.
References
Link | Resource |
---|---|
https://github.com/Icinga/icinga2/pull/6103 | Third Party Advisory |
Configurations
Information
Published : 2018-02-27 11:29
Updated : 2018-03-23 07:56
NVD link : CVE-2018-6532
Mitre link : CVE-2018-6532
JSON object : View
CWE
CWE-400
Uncontrolled Resource Consumption
Products Affected
icinga
- icinga