Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-61908

Опубликовано: 16 окт. 2025
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*
Версия от 2.10.0 (включая) до 2.13.13 (исключая)
cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*
Версия от 2.14.0 (включая) до 2.14.7 (исключая)
cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*
Версия от 2.15.0 (включая) до 2.15.1 (исключая)

EPSS

Процентиль: 21%
0.00069
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.

CVSS3: 6.5
debian
4 месяца назад

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2. ...

EPSS

Процентиль: 21%
0.00069
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476