CVE-2014-1878: Icinga

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.

Affected products

• Icinga Icinga: up to and including 1.8.5; version 1.8.0 only; version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; version 1.8.4 only; …
• Nagios Nagios: up to and including 4.0.3; version 4.0.0 only; version 4.0.2 only

Published 2014-02-28. Last modified 2026-06-17.