Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-61550 →
DEBIAN-CVE-2026-61550
Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validat...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.6-1+deb13u1"}]}]
Debian:14
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.2-1"}]}]
Références
- advisory security-tracker.debian.org