Bug 2513957

Summary:	check_icmp: host-count overflow leads to heap buffer overflow in setuid-root binary
Product:	[Fedora] Fedora	Reporter:	Jan ONDREJ <ondrejj>
Component:	nagios-plugins	Assignee:	Guido Aulisi <guido.aulisi>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	44	CC:	guido.aulisi, igor.raits, lemenkov, ssmoogen
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	nagios-plugins-2.5-2.el9 nagios-plugins-2.5-2.el10_4 nagios-plugins-2.5-2.fc44 nagios-plugins-2.5-2.fc43	Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2026-09-12 00:35:36 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jan ONDREJ 2026-08-11 12:41:12 UTC

Description of problem:

> A local user can trigger a heap buffer overflow in check_icmp by              
> supplying more than 65535 target hosts, which overflows an internal           
> counter. This happens before check_icmp drops its privileges, so the          
> corruption occurs while still running as root on setuid-root                  
> installations.

Fix is present in nagios-plugins pull request:
  https://github.com/nagios-plugins/nagios-plugins/pull/833

Please apply this fix. With this bug all Fedora nagios installations are vulnerable to this issue. check_icmp is setuid-root, so root exploit is possible.

I don't think about CVE assigned to this issue.

https://www.openwall.com/lists/oss-security/2026/07/01/5
https://www.openwall.com/lists/oss-security/2026/07/01/11

Comment 1 Fedora Update System 2026-09-03 11:44:38 UTC

FEDORA-2026-c2fbd942bc (nagios-plugins-2.5-2.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-c2fbd942bc

Comment 2 Fedora Update System 2026-09-03 11:58:49 UTC

FEDORA-2026-7ac5fb031f (nagios-plugins-2.5-2.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7ac5fb031f

Comment 3 Fedora Update System 2026-09-03 12:27:33 UTC

FEDORA-EPEL-2026-df80b78e8b (nagios-plugins-2.5-2.el10_4) has been submitted as an update to Fedora EPEL 10.4.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b

Comment 4 Fedora Update System 2026-09-03 13:15:37 UTC

FEDORA-EPEL-2026-b3ba209e5d (nagios-plugins-2.5-2.el9) has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d

Comment 5 Fedora Update System 2026-09-04 01:34:16 UTC

FEDORA-EPEL-2026-df80b78e8b has been pushed to the Fedora EPEL 10.4 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2026-09-04 01:40:17 UTC

FEDORA-EPEL-2026-b3ba209e5d has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2026-09-04 01:50:43 UTC

FEDORA-2026-c2fbd942bc has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-c2fbd942bc`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-c2fbd942bc

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2026-09-04 16:24:55 UTC

FEDORA-2026-7ac5fb031f has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-7ac5fb031f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-7ac5fb031f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2026-09-12 00:35:36 UTC

FEDORA-EPEL-2026-b3ba209e5d (nagios-plugins-2.5-2.el9) has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2026-09-12 00:46:50 UTC

FEDORA-EPEL-2026-df80b78e8b (nagios-plugins-2.5-2.el10_4) has been pushed to the Fedora EPEL 10.4 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2026-09-12 01:05:56 UTC

FEDORA-2026-c2fbd942bc (nagios-plugins-2.5-2.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 12 Fedora Update System 2026-09-12 01:14:51 UTC

FEDORA-2026-7ac5fb031f (nagios-plugins-2.5-2.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.