Monit may crash if "unmonitor" or "stop" action was triggered by some test: the _handleAction() will call Util_monitorUnset() which frees the service events list, including the current event which triggered the action. The reset of the state_change flag (which is not necessary) then dereferenced a freed event. References: https://bitbucket.org/tildeslash/monit/issues/764/use-after-free-in-function-_handleevent https://seclists.org/oss-sec/2018/q4/274 Upstream patch: https://bitbucket.org/tildeslash/monit/commits/5827927c4623
Created monit tracking bugs for this issue: Affects: epel-all [bug 1663931] Affects: fedora-all [bug 1663930]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.