Heap-Based Buffer Overflow in Nagios NRPE 3.2.1
Summary
CVE-2020-6582: Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call. Affects nrpe across 2 version ranges.
< 4.0.0-r0
< 86a77fe3a9cbfae990adc578834fd537f4fa8557
Fixed in 4.0.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Nagios NRPE (Nagios Remote Plugin Executor) is a tool that allows remote execution of Nagios plugins on other Linux/Unix machines. It is commonly used to monitor and manage remote hosts. The NRPE package is available in various versions of the Alpine Linux distribution, including v3.13, v3.14, v3.15, v3.16, and v3.18. However, versions up to and including 3.2.1 are vulnerable to a Heap-Based Buffer Overflow.
Vulnerability Detail
The vulnerability in Nagios NRPE 3.2.1 is a Heap-Based Buffer Overflow. It occurs when a small negative number is interpreted as a large positive number during a bzero call. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the application. The vulnerability has a CVSS score of 7.5, indicating a high severity.
How To Fix
Minimum fixed version
4.0.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade nrpeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the NRPE package to the fixed version.
Conclusion
The Heap-Based Buffer Overflow vulnerability in Nagios NRPE 3.2.1 can have severe consequences, including arbitrary code execution and application crashes. It is crucial to update the NRPE package to version 4.0.0-r0 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for nrpe →
FAQ
Nagios NRPE (Nagios Remote Plugin Executor) is a tool that allows remote execution of Nagios plugins on other Linux/Unix machines. It is commonly used for monitoring and managing remote hosts.
A Heap-Based Buffer Overflow is a type of vulnerability where a buffer in the heap memory is overflowed, leading to memory corruption and potential code execution or application crashes.
This vulnerability in Nagios NRPE can allow an attacker to execute arbitrary code or crash the application, potentially leading to a complete compromise of the affected system.
The CVSS score of this vulnerability is 7.5, indicating a high severity.
You can update the NRPE package by using the package manager of your Alpine Linux distribution and installing version 4.0.0-r0 or later.
Related vulnerabilities
Recent vulnerabilities recorded for nrpe.
