Debian Nagios4 vulnerabilities

CVE-2018-13458 [MEDIUM] CVE-2018-13458: nagios4 - qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference ... qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket. Scope: local bookworm: resolved (fixed in 4.3.4-3) bullseye: resolved (fixed in 4.3.4-3) sid: resolved (fixed in 4.3.4-3) trixie: resolved (fixe

CVE-2018-13457 [MEDIUM] CVE-2018-13457: nagios4 - qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference ... qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket. Scope: local bookworm: resolved (fixed in 4.3.4-3) bullseye: resolved (fixed in 4.3.4-3) sid: resolved (fixed in 4.3.4-3) trixie: resolved (fixe

CVE-2018-13441 [MEDIUM] CVE-2018-13441: nagios4 - qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dere... qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket. Scope: local bookworm: resolved (fixed in 4.3.4-3) bullseye: resolved (fixed in 4.3.4-3) sid: resolved (fixed in 4.3.4-3) trixie: resolve

CVE-2020-13977 [MEDIUM] CVE-2020-13977: nagios4 - Nagios 4.4.5 allows an attacker, who already has administrative access to change... Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408. Scope: local bookworm: resolv

CVE-2018-18245 [MEDIUM] CVE-2018-18245: nagios4 - Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as de... Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE. Scope: local bookworm: resolved (fixed in 4.3.4-3) bullseye: resolved (fixed in 4.3.4-3) sid: resolved (fixed in 4.3.4-3) trixie: resolved (fixed in 4.3.4-3)