Debian/xymon: critical 9.8
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb paramete
Action: Upgrade xymon to 4.3.29-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.29-1 | - |
Fixed versions
| 4.3.29-1 |
Sources
- osv: DEBIAN-CVE-2019-13273#Debian:14/xymon
- https://security-tracker.debian.org/tracker/CVE-2019-13273
published · modified · JSON