GCVE-VVD-MAGEIA-2014-10 — Vulnetix

GCVE-VVD-MAGEIA-2014-10

Advisory Published

Vulnetix · Advisory published January 31, 2014

A flaw was reported and fixed in Nagios, which can be exploited to cause a denial of service. This vulnerability is caused due to an off-by-one error within the process_cgivars() function, which can be exploited to cause an out-of-bounds read by sending a specially-crafted key value to the Nagios web UI (CVE-2013-7108, CVE-2013-7205). An issue that prevented the service from starting has also been fixed.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	k3b	0 (affected), 2.0.2-9.1.mga3 (unaffected), 0 (affected), 2.0.2-9.1.mga3.tainted (unaffected)	—
Mageia	nagios	0 (affected), 3.4.4-4.2.mga3 (unaffected)	—

Aliases

CVE-2013-7108 CVE-2013-7205

Transitive aliases

GHSA-q8m8-7jgv-237q GSD-2013-7106 GHSA-p3hf-j3h8-8mqv CVE-2008-7313 GHSA-9fx5-wc5q-367p GSD-2018-13458 CVE-2017-12847 GHSA-6867-mm47-7j8j RHSA-2013:1526 GHSA-gm59-fphq-rmww GHSA-cpmq-w8c4-79w6 CVE-2019-3698 CVE-2012-6096 CVE-2016-0726 GHSA-cjgr-x5fp-pc84 SUSE-SU-2018:3240-1 GSD-2008-5153 CVE-2014-5008 GSD-2013-7205 GHSA-4vgm-f9qh-9vm8 CVE-2018-13457 GHSA-8727-34w8-v299 GHSA-828p-3vwg-wc22 CVE-2016-8641 GSD-2014-5008 CVE-2013-4214 GHSA-hp8w-x4cg-7866 VVD-GENTOO-2006-132159 VVD-MAGEIA-2017-437 CNVD-2018-17504 CNVD-2017-00187 SUSE-SU-2018:3620-1 CVE-2006-2162 VVD-MAGEIA-2021-209 CVE-2013-2029 CVE-2015-8010 CVE-2016-10089 GSD-2018-13457 GHSA-x57r-7jqf-5w9p GHSA-m23h-2mvj-h557 OPENSUSE-SU-2024:10182-1 CVE-2013-2214 GHSA-8g54-hg6f-wpv7 GHSA-5m9g-pc3f-6pgc GSD-2008-7313 VVD-MAGEIA-2019-104 RHSA-2017:0213 RHSA-2017:0212 GHSA-q77f-5m65-8q6j CVE-2020-13977 GHSA-vcwh-ghpm-79h9 GHSA-9332-j4wp-2xcq CNVD-2018-17098 GHSA-6rvq-8cg9-gm39 CVE-2016-6209 GHSA-mmcj-m9g2-2r59 GSD-2020-13977 VVD-MAGEIA-2014-186 CVE-2018-13458 GSD-2011-2179 GHSA-x7r4-26m9-hmgq CVE-2016-9565 CVE-2008-4796 GHSA-976m-29vc-cxx7 OPENSUSE-SU-2020:0500-1 GHSA-x8j3-jcqf-xvvp VVD-MAGEIA-2017-45 GHSA-fv88-xv9q-4vg3 GHSA-6j77-rprv-m39j BDU:2015-03479 CVE-2011-1523 CVE-2014-1878 GHSA-967x-cpx9-7xr2 GHSA-9prg-2xvx-hr7x CNVD-2020-35930 CVE-2008-5153 GHSA-g42h-8ph9-jmvx OPENSUSE-SU-2020:0517-1 CVE-2011-2179 OPENSUSE-SU-2021:0735-1 GSD-2013-2029 GSD-2016-10089 GHSA-48qr-xf75-jc6h CVE-2013-7107 CVE-2018-13441 CVE-2013-7106 GSD-2012-6096 OPENSUSE-SU-2021:0715-1 RHSA-2017:0211 CVE-2014-5009 OPENSUSE-SU-2024:11073-1 CVE-2014-2386 CVE-2018-18245 CVE-2007-5803 CVE-2016-9566 GHSA-rg2g-95pj-mc2p GHSA-xh33-x4fq-3r2h GHSA-wr36-qh3g-7h4v GHSA-c962-q9ch-7qhw RHSA-2017:0214

References

Updated nagios package fixes security vulnerability

advisory

Updated nagios package fixes security vulnerability

issue

Updated nagios package fixes security vulnerability

issue

Updated nagios package fixes security vulnerability

issue

Updated nagios package fixes security vulnerability

issue

Updated k3b package fixes sox detection

advisory

Updated k3b package fixes sox detection

issue

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›