CVE-2017-12847: Nagios

Medium severity, CVSS 6.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill `cat /pathname/nagios.lock`" command.

Affected products

• Nagios Nagios: up to and including 4.3.2

Published 2017-08-23. Last modified 2026-06-17.