Nagios Support Forum

I'm hoping to find out anything more about CVE-2021-3193. Specifically:



Were there active exploits that prompted them to release the update, or just POC's?
When did they first learn about the POC's (or exploits)?
What is the evidence to look for if it was exploited on the box?
When was the update released? (One site says 1/21, one says 1/22.)

Hi,

It was brought to our attention by a customer, the exploit was patched and we filed the corresponding CVE.

If you feel your system has been compromised, please PM me the system profile and we'll review this for you right away. Alternatively, run a top command and look for the avalonsabre process.

Best Regards,
Benjamin