oss-sec mailing list archives

Re: check_icmp (Monitoring Plugins): host-count overflow leads to heap buffer overflow in setuid-root binary

From: Michael Orlitzky <michael () orlitzky com>
Date: Wed, 1 Jul 2026 16:49:27 -0400

On 2026-07-01 15:36:00, Holger Weiß wrote:

We released Monitoring Plugins 3.0.1, which fixes a security issue in 
the check_icmp plugin.

...

A local user can trigger a heap buffer overflow in check_icmp by 
supplying more than 65535 target hosts, which overflows an internal 
counter. This happens before check_icmp drops its privileges, so the 
corruption occurs while still running as root on setuid-root 
installations.


If anyone was wondering, nagios-plugins has the same problem.

Fix: https://github.com/nagios-plugins/nagios-plugins/pull/833

Current thread:

check_icmp (Monitoring Plugins): host-count overflow leads to heap buffer overflow in setuid-root binary Holger Weiß (Jul 01)
- Re: check_icmp (Monitoring Plugins): host-count overflow leads to heap buffer overflow in setuid-root binary Michael Orlitzky (Jul 01)