Skip to main content

Xymon CVE-2019-13452

CRITICAL
Buffer Overflow (CWE-119)
2019-08-27 cve@mitre.org
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 27, 2019 - 17:15 nvd
CRITICAL 9.8

DescriptionNVD

In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c.

AnalysisAI

In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. Affected products include: Xymon, Debian Debian Linux. Version information: through 4.3.28.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Xymon

View all
CVE-2016-2056 HIGH POC
8.8 Apr 13

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via

CVE-2016-2055 HIGH POC
7.5 Apr 13

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files

CVE-2019-13455 CRITICAL POC
9.8 Aug 27

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because

CVE-2016-2054 CRITICAL
9.8 Apr 13

Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attac

CVE-2015-1430 CRITICAL
9.8 Aug 28

Buffer overflow in xymon 4.3.17-1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au

CVE-2019-13486 CRITICAL
9.8 Aug 27

In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of   expan

CVE-2019-13485 CRITICAL
9.8 Aug 27

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long h

CVE-2019-13484 CRITICAL
9.8 Aug 27

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of   expansion in appfeed.c.

CVE-2019-13451 CRITICAL
9.8 Aug 27

In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c. Rated critical severity (CVSS 9.8), this v

CVE-2019-13273 CRITICAL
9.8 Aug 27

In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. Rated critical severity (CVSS

CVE-2019-13274 MEDIUM
6.1 Aug 27

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db p

CVE-2016-2058 MEDIUM
5.4 Apr 13

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymo

Share

CVE-2019-13452 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy