CVE-2018-13441 — Vulnetix

CVE-2018-13441 PUBLISHED

Reported by mitre · Published July 12, 2018

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	n/a

Exploit Intelligence

https://gist.github.com/fakhrizulkifli/8df4a174158df69ebd765f824bd736b8 (nist-nvd)
https://www.exploit-db.com/exploits/45082/ (nist-nvd)
Nagios Core 4.4.1 - Denial of Service Vulnerability (0day-today)

Timeline

Jul 12, 2018 CVE Published
Jul 24, 2018 PoC Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

x_refsource_CONFIRM
x_refsource_MISC
45082 exploitx_refsource_EXPLOIT-DB
x_refsource_CONFIRM
openSUSE-SU-2020:0500 vendor-advisoryx_refsource_SUSE
openSUSE-SU-2020:0517 vendor-advisoryx_refsource_SUSE

Open in Interactive Console →