CVE-2018-13457

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-134585.5qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local deniaCVE-2018-13467.5Addresses denial of service attack to eDirectory versions prior to 9.1.CVE-2018-134627.5The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-134637.5The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows tCVE-2018-134647.5The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-134657.5The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-134667.5The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134677.5The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-134687.5The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134697.5The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner CVE-2018-13476.1The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.CVE-2018-134707.5The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner o
CVE-2018-13457: Medium severity, CVSS 5.5 | Vulnix