Lucene search

K
ubuntuUbuntuUSN-2090-1
HistoryJan 27, 2014 - 12:00 a.m.

Munin vulnerabilities

2014-01-2700:00:00
ubuntu.com
32

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.0%

Releases

  • Ubuntu 13.10
  • Ubuntu 12.10
  • Ubuntu 12.04

Packages

  • munin - Network-wide graphing framework

Details

Christoph Biedl discovered that Munin incorrectly handled certain
multigraph data. A remote attacker could use this issue to cause Munin to
consume resources, resulting in a denial of service. (CVE-2013-6048)

Christoph Biedl discovered that Munin incorrectly handled certain
multigraph service names. A remote attacker could use this issue to cause
Munin to stop data collection, resulting in a denial of service.
(CVE-2013-6359)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchmunin< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-async< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-common< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-doc< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-node< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-plugins-core< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-plugins-extra< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu13.10noarchmunin-plugins-java< 2.0.17-2ubuntu1.1UNKNOWN
Ubuntu12.10noarchmunin< 2.0.2-1ubuntu2.3UNKNOWN
Ubuntu12.10noarchmunin-async< 2.0.2-1ubuntu2.3UNKNOWN
Rows per page:
1-10 of 211

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.0%