Lucene search
HistoryNov 15, 2023 - 11:15 a.m.
CVE-2023-23549
cve-2023-23549
improper input validation
checkmk
security vulnerability
partial denial of service
nvd
2.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.2%
Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.
Affected configurations
Node
tribe29checkmkMatch2.0.0-
ORtribe29checkmkMatch2.0.0b1
ORtribe29checkmkMatch2.0.0b2
ORtribe29checkmkMatch2.0.0b3
ORtribe29checkmkMatch2.0.0b4
ORtribe29checkmkMatch2.0.0b5
ORtribe29checkmkMatch2.0.0b6
ORtribe29checkmkMatch2.0.0b7
ORtribe29checkmkMatch2.0.0b8
ORtribe29checkmkMatch2.0.0i1
ORtribe29checkmkMatch2.0.0p1
ORtribe29checkmkMatch2.0.0p10
ORtribe29checkmkMatch2.0.0p11
ORtribe29checkmkMatch2.0.0p12
ORtribe29checkmkMatch2.0.0p13
ORtribe29checkmkMatch2.0.0p14
ORtribe29checkmkMatch2.0.0p15
ORtribe29checkmkMatch2.0.0p16
ORtribe29checkmkMatch2.0.0p17
ORtribe29checkmkMatch2.0.0p18
ORtribe29checkmkMatch2.0.0p19
ORtribe29checkmkMatch2.0.0p2
ORtribe29checkmkMatch2.0.0p20
ORtribe29checkmkMatch2.0.0p21
ORtribe29checkmkMatch2.0.0p22
ORtribe29checkmkMatch2.0.0p23
ORtribe29checkmkMatch2.0.0p24
ORtribe29checkmkMatch2.0.0p25
ORtribe29checkmkMatch2.0.0p26
ORtribe29checkmkMatch2.0.0p27
ORtribe29checkmkMatch2.0.0p28
ORtribe29checkmkMatch2.0.0p29
ORtribe29checkmkMatch2.0.0p3
ORtribe29checkmkMatch2.0.0p30
ORtribe29checkmkMatch2.0.0p31
ORtribe29checkmkMatch2.0.0p32
ORtribe29checkmkMatch2.0.0p33
ORtribe29checkmkMatch2.0.0p34
ORtribe29checkmkMatch2.0.0p35
ORtribe29checkmkMatch2.0.0p36
ORtribe29checkmkMatch2.0.0p37
ORtribe29checkmkMatch2.0.0p38
ORtribe29checkmkMatch2.0.0p39
ORtribe29checkmkMatch2.0.0p4
ORtribe29checkmkMatch2.0.0p5
ORtribe29checkmkMatch2.0.0p6
ORtribe29checkmkMatch2.0.0p7
ORtribe29checkmkMatch2.0.0p8
ORtribe29checkmkMatch2.0.0p9
ORtribe29checkmkMatch2.1.0-
ORtribe29checkmkMatch2.1.0b1
ORtribe29checkmkMatch2.1.0b2
ORtribe29checkmkMatch2.1.0b3
ORtribe29checkmkMatch2.1.0b4
ORtribe29checkmkMatch2.1.0b5
ORtribe29checkmkMatch2.1.0b6
ORtribe29checkmkMatch2.1.0b7
ORtribe29checkmkMatch2.1.0b8
ORtribe29checkmkMatch2.1.0b9
ORtribe29checkmkMatch2.1.0p1
ORtribe29checkmkMatch2.1.0p10
ORtribe29checkmkMatch2.1.0p11
ORtribe29checkmkMatch2.1.0p12
ORtribe29checkmkMatch2.1.0p13
ORtribe29checkmkMatch2.1.0p14
ORtribe29checkmkMatch2.1.0p15
ORtribe29checkmkMatch2.1.0p16
ORtribe29checkmkMatch2.1.0p17
ORtribe29checkmkMatch2.1.0p18
ORtribe29checkmkMatch2.1.0p19
ORtribe29checkmkMatch2.1.0p2
ORtribe29checkmkMatch2.1.0p20
ORtribe29checkmkMatch2.1.0p21
ORtribe29checkmkMatch2.1.0p22
ORtribe29checkmkMatch2.1.0p23
ORtribe29checkmkMatch2.1.0p24
ORtribe29checkmkMatch2.1.0p25
ORtribe29checkmkMatch2.1.0p26
ORtribe29checkmkMatch2.1.0p27
ORtribe29checkmkMatch2.1.0p28
ORtribe29checkmkMatch2.1.0p29
ORtribe29checkmkMatch2.1.0p3
ORtribe29checkmkMatch2.1.0p30
ORtribe29checkmkMatch2.1.0p31
ORtribe29checkmkMatch2.1.0p32
ORtribe29checkmkMatch2.1.0p33
ORtribe29checkmkMatch2.1.0p34
ORtribe29checkmkMatch2.1.0p35
ORtribe29checkmkMatch2.1.0p36
ORtribe29checkmkMatch2.1.0p4
ORtribe29checkmkMatch2.1.0p5
ORtribe29checkmkMatch2.1.0p6
ORtribe29checkmkMatch2.1.0p7
ORtribe29checkmkMatch2.1.0p8
ORtribe29checkmkMatch2.1.0p9
ORtribe29checkmkMatch2.2.0-
ORtribe29checkmkMatch2.2.0b1
ORtribe29checkmkMatch2.2.0b2
ORtribe29checkmkMatch2.2.0b3
ORtribe29checkmkMatch2.2.0b4
ORtribe29checkmkMatch2.2.0b5
ORtribe29checkmkMatch2.2.0b6
ORtribe29checkmkMatch2.2.0b7
ORtribe29checkmkMatch2.2.0b8
ORtribe29checkmkMatch2.2.0i1
ORtribe29checkmkMatch2.2.0p1
ORtribe29checkmkMatch2.2.0p10
ORtribe29checkmkMatch2.2.0p11
ORtribe29checkmkMatch2.2.0p12
ORtribe29checkmkMatch2.2.0p13
ORtribe29checkmkMatch2.2.0p2
ORtribe29checkmkMatch2.2.0p3
ORtribe29checkmkMatch2.2.0p4
ORtribe29checkmkMatch2.2.0p5
ORtribe29checkmkMatch2.2.0p6
ORtribe29checkmkMatch2.2.0p7
ORtribe29checkmkMatch2.2.0p8
ORtribe29checkmkMatch2.2.0p9
| CPE | Name | Operator | Version |
|---|---|---|---|
| tribe29:checkmk | tribe29 checkmk | eq | 2.0.0 |
| tribe29:checkmk | tribe29 checkmk | eq | 2.1.0 |
| tribe29:checkmk | tribe29 checkmk | eq | 2.2.0 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Checkmk",
"vendor": "Checkmk GmbH",
"versions": [
{
"lessThan": "2.2.0p15",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"lessThan": "2.1.0p37",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.0p39",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
]References
Related
prion
prion
Input validation
2023-11-15 11:15:00
cvelist
cvelist
CVE-2023-23549 DoS via long hostnames
2023-11-15 11:07:28
ubuntucve
ubuntucve
CVE-2023-23549
2023-11-15 00:00:00
nvd
nvd
CVE-2023-23549
2023-11-15 11:15:08
osv
osv
CVE-2023-23549
2023-11-15 11:15:08
openvas
openvas
Checkmk 2.0.x < 2.1.0p37, 2.2.x < 2.2.0p15 Multiple Vulnerabilities
2023-11-17 00:00:00
2.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.2%
Related for CVE-2023-23549