CVE-2017-12847

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-12847
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12847.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12847
Downstream
Related
Published
2017-08-23T21:29:00Z
Modified
2025-10-21T04:10:10.483543Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
[none]
Details

Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill cat /pathname/nagios.lock" command.

References

Affected packages

Git / github.com/nagiosenterprises/nagioscore

Affected ranges

Type
GIT
Repo
https://github.com/nagiosenterprises/nagioscore
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1b197346d490df2e2d3b1dcce5ac6134ad0c8752
Fixed
3baffa78bafebbbdf9f448890ba5a952ea2d73cb

Affected versions

4.*

4.2.1

nagios-1.*

nagios-1.0a6
nagios-1.0a7
nagios-1.0b1
nagios-1.0b2
nagios-1.0b3
nagios-1.0b4
nagios-1.0b5
nagios-1.0b6

nagios-2.*

nagios-2.0
nagios-2.0.b5
nagios-2.0b1
nagios-2.0b2
nagios-2.0b3
nagios-2.0b4
nagios-2.0b6
nagios-2.0rc1

nagios-3.*

nagios-3.0
nagios-3.0.1
nagios-3.0.2
nagios-3.0.3
nagios-3.0.4
nagios-3.0.5
nagios-3.0.6
nagios-3.0a1
nagios-3.0a2
nagios-3.0a3
nagios-3.0a4
nagios-3.0a5
nagios-3.0b1
nagios-3.0b2
nagios-3.0b3
nagios-3.0b4
nagios-3.0b5
nagios-3.0b6
nagios-3.0b7
nagios-3.0rc1
nagios-3.0rc2
nagios-3.0rc3
nagios-3.1.0
nagios-3.1.1
nagios-3.1.2
nagios-3.2.0
nagios-3.2.1
nagios-3.2.2
nagios-3.2.3
nagios-3.3.1
nagios-3.4.0
nagios-3.4.1

nagios-4.*

nagios-4.0.0
nagios-4.0.0-beta1
nagios-4.0.0-beta2
nagios-4.0.0-beta3
nagios-4.0.0-beta4
nagios-4.0.1
nagios-4.0.2
nagios-4.0.2rc1
nagios-4.0.3
nagios-4.0.3rc1
nagios-4.0.4
nagios-4.0.5
nagios-4.0.6
nagios-4.0.7
nagios-4.0.8
nagios-4.0.8rc1
nagios-4.1.0
nagios-4.1.0rc2
nagios-4.1.1
nagios-4.1.2-Pre1
nagios-4.2.0
nagios-4.2.1
nagios-4.2.2
nagios-4.2.3
nagios-4.3.0
nagios-4.3.1
nagios-4.3.2

release-4.*

release-4.2.3
release-4.2.4
release-4.3.0

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "id": "CVE-2017-12847-1c71215f",
        "source": "https://github.com/nagiosenterprises/nagioscore/commit/1b197346d490df2e2d3b1dcce5ac6134ad0c8752",
        "signature_version": "v1",
        "target": {
            "file": "base/nagios.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "18166993775096451283999305342393905517",
                "323285575529554466441180117519626675682",
                "302534000399466920953880950409099860418",
                "224454027163474106003223621063889339353",
                "136183904707565155328563958712168354046",
                "265106673575102192321822654067499560795",
                "169704132406692230459444399014392071239",
                "99320945942352524122598772702530167798",
                "222776566464554068020891999008718271011",
                "184054446001580763048825606566453869192",
                "278528254558251760976394294382491493241",
                "188647213713844536507083633210708505557",
                "222291352107249277855673226898122059471",
                "99719521977677722006786535212271976493",
                "37644059831282870098599897202419719148",
                "334925305892522566529414181630766856783"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "id": "CVE-2017-12847-ff6f8b6d",
        "source": "https://github.com/nagiosenterprises/nagioscore/commit/1b197346d490df2e2d3b1dcce5ac6134ad0c8752",
        "signature_version": "v1",
        "target": {
            "function": "main",
            "file": "base/nagios.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "163218892130331372729747023081253370699",
            "length": 15757.0
        }
    }
]