CVE-2016-6209

Published: 31 March 2017

Cross-site scripting (XSS) vulnerability in Nagios.

Priority

CVSS 3 base score: 6.1

Status

Package	Release	Status
icinga Launchpad, Ubuntu, Debian	Upstream	Not vulnerable (corewindow not supported)

	Ubuntu 21.04 (Hirsute Hippo)	Does not exist
	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (corewindow not supported)
	Ubuntu 16.04 ESM (Xenial Xerus)	Not vulnerable (corewindow not supported)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was not-affected [corewindow not supported])
nagios3 Launchpad, Ubuntu, Debian	Upstream	Needed

	Ubuntu 21.04 (Hirsute Hippo)	Does not exist
	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Needed
	Ubuntu 16.04 ESM (Xenial Xerus)	Needed
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was deferred [2018-04-20])
	Patches: Upstream: https://github.com/NagiosEnterprises/nagioscore/commit/78b7bdde3ab4dec265879ff1b4d49a398bf3ba9c

Notes

Author	Note
mdeslaur	upstream fix disables functionnality

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM

Further reading