Monitoring Plugins check_icmp host count overflow corrupts memory
A logged-in user on the server could try to gain admin rights.
Summary
The check_icmp tool in Monitoring Plugins miscounts large host lists, which can corrupt memory. A local low-privileged user could target installs where it runs as setuid root, but privilege escalation has not been demonstrated.
Affected when
- check_icmp installed as setuid root
- Versions 3.0.0-rc1 up to, but not including, 3.0.1
- More than 65,535 hosts supplied
What to do
Update to version 3.0.1.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen