CVE-2013-6048

The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) via crafted multigraph data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
VendorProductVersion
munin-monitoringmunin
𝑥
≤ 2.0.17
munin-monitoringmunin
2.0.0
munin-monitoringmunin
2.0.1
munin-monitoringmunin
2.0.2
munin-monitoringmunin
2.0.3
munin-monitoringmunin
2.0.4
munin-monitoringmunin
2.0.5
munin-monitoringmunin
2.0.6
munin-monitoringmunin
2.0.7
munin-monitoringmunin
2.0.8
munin-monitoringmunin
2.0.9
munin-monitoringmunin
2.0.10
munin-monitoringmunin
2.0.11
munin-monitoringmunin
2.0.11.1
munin-monitoringmunin
2.0.12
munin-monitoringmunin
2.0.13
munin-monitoringmunin
2.0.14
munin-monitoringmunin
2.0.15
munin-monitoringmunin
2.0.16
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
munin
bullseye
2.0.67-3
fixed
bookworm
2.0.73-1
fixed
sid
2.0.76-1
fixed
trixie
2.0.76-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
munin
saucy
Fixed 2.0.17-2ubuntu1.1
released
raring
ignored
quantal
Fixed 2.0.2-1ubuntu2.3
released
precise
Fixed 1.4.6-3ubuntu3.4
released
lucid
ignored
Common Weakness Enumeration
References
http://www.debian.org/security/2013/dsa-2815
http://www.ubuntu.com/usn/USN-2090-1
https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog
https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab99
http://www.debian.org/security/2013/dsa-2815
http://www.ubuntu.com/usn/USN-2090-1
https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog
https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab99