cve/2018/CVE-2018-13457.md

CVE-2018-13457

Description

qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.

POC

Reference

• https://gist.github.com/fakhrizulkifli/87cf1c1ad403b4d40a86d90c9c9bf7ab
• https://gist.github.com/fakhrizulkifli/87cf1c1ad403b4d40a86d90c9c9bf7ab
• https://www.exploit-db.com/exploits/45082/
• https://www.exploit-db.com/exploits/45082/

Github

No PoCs found on GitHub currently.