226 matches found
Design/Logic Flaw
The getgrouptree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service infinite loop and memory consumption in the munin-html process via crafted multigraph data...
Code injection
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service abort data collection for node via a plugin that uses "multigraph" as a multigraph service name...
CVE-2013-6048
The getgrouptree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service infinite loop and memory consumption in the munin-html process via crafted multigraph data...
CVE-2013-6048
CVE-2013-6048 affects Munin before 2.0.18. The vulnerability exists in get_group_tree in Munin’s Master HTMLConfig.pm, where crafted multigraph data can be processed to trigger a denial of service (infinite loop and excessive memory use) in the munin-html process. Multiple advisories (Debian DLA-...
CVE-2013-6359
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service abort data collection for node via a plugin that uses "multigraph" as a multigraph service name...
CVE-2013-6359
CVE-2013-6359 affects Munin before 2.0.18. Root cause: Munin::Master::Node mishandles multigraph data; a plugin using a multigraph service name can trigger a denial of service (abort data collection for a node). Exploitation vectors are remote and rely on a crafted multigraph name. Remediation: u...
CVE-2013-6048
The getgrouptree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service infinite loop and memory consumption in the munin-html process via crafted multigraph data...
CVE-2013-6359
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service abort data collection for node via a plugin that uses "multigraph" as a multigraph service name...
CVE-2013-6048
The getgrouptree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service infinite loop and memory consumption in the munin-html process via crafted multigraph data...
CVE-2013-6359
Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service abort data collection for node via a plugin that uses "multigraph" as a multigraph service name...
Debian DSA-2815-1 : munin - denial of service
Christoph Biedl discovered two denial of service vulnerabilities in munin, a network-wide graphing framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-6048 The Munin::Master::Node module of munin does not properly validate certain data a node...
[SECURITY] [DSA 2815-1] munin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2815-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 09, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2815-1] munin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2815-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 09, 2013 http://www.debian.org/security/faq -...
DSA-2815-1 munin - denial of service
Bulletin has no description...
Debian Security Advisory DSA 2815-1 (munin - denial of service)
Christoph Biedl discovered two denial of service vulnerabilities in munin, a network-wide graphing framework. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-6048 The Munin::Master::Node module of munin does not properly validate certain data a node...
Debian: Security Advisory (DSA-2815-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : munin (ALAS-2012-130)
Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart plugin. C Tenable Network Security, Inc. The descriptive text and...
Munin Resource Monitoring Traffic Detection (nooutput)
Binary data 6949.prm...
Munin Resource Monitoring < 2.0.6 Multiple Vulnerabilities
Binary data 6948.prm...
Munin Resource Monitoring Traffic Detection
Binary data 6950.prm...