Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-23549
HistoryNov 15, 2023 - 12:00 a.m.

CVE-2023-23549

2023-11-1500:00:00
ubuntu.com
ubuntu.com
9
input validation
checkmk
privileged attackers
denial of service
ui
hostnames
unix

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High

EPSS

0

Percentile

13.3%

Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39
allows priviledged attackers to cause partial denial of service of the UI
via too long hostnames.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchcheck-mk< anyUNKNOWN
ubuntu16.04noarchcheck-mk< anyUNKNOWN

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High

EPSS

0

Percentile

13.3%