Evil-DB LogoEvil-DB
← All CVEs

CVE-2016-9565

critical · 9.8

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

9.8
CVSS
22.7%
EPSS (exploit prob.)
98th
EPSS percentile
2016-12-15
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-284

Affected products

VendorProductAffected versions
nagiosnagios<= 4.2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-9565