Is this a vulnerability

Icinga 2
1

I use icinga2 - The Icinga 2 network monitoring daemon (version: r2.13.3-1)

My greenbone reported the following vulnerability on port 5665

SSL/TLS: Renegotiation DoS Vulnerability (CVE-2011-1473, CVE-2011-5094)

This indicates a Problem in with the SSL implementation . Is this a real bug or a false positiv ?

Thanks JAOH

2

Hi and welcome to the icinga community :wink:

this has been fixed in Icinga 2.13.9: Icinga 2 CHANGELOG - Icinga 2

However, there has been another CVE in icinga2, which has been fixed for the 2.13.x branch in 2.13.12: Icinga 2 CHANGELOG - Icinga 2

3

Jokes on both of you! :wink:

Renegotiation is just another TLS handshake on the same TCP connection.

This affects just masters with too old OpenSSL versions.

The really big fish here is CVE-2024-49369 fixed in v2.13.10 (TLS certificate validation bypass):

2 Likes