Buffer overflow in Xymon - CVE-2019-13452

Detailed vulnerability description

The vulnerability allows a remote attacker to cause a denial of service (DoS) condition on the target system.

The vulnerability exists due to insufficient validation of user-supplied input in the "reportlog.c" file. A remote attacker can submit malicious input, trigger memory corruption and cause a denial of service condition on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

How to mitigate CVE-2019-13452

Sources

• https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/reportlog.c
• https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html
• https://lists.xymon.com/archive/2019-July/046570.html