CVE catalog
CVE-2017-9781
UBUNTU-CVE-2017-9781
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.45% · Oct 25, 2026
USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a race condition leading to information disclosure. (CVE-2017-14955) It was discovered that Checkmk incorrectly handled certain inputs. An attacker could use these cross-site scripting issues to inject arbitrary html or javascript code to obtain sensitive information including user information, session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563, CVE-2021-40906, CVE-2022-24565)
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | check-mk | pro | 1.2.6p5-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1+esm1 | fixed |
| Ubuntu | check-mk | pro | 1.2.6p5-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1+esm1 | fixed |
| Ubuntu | check-mk | 18.04 | 1.2.8p16-1ubuntu0.1 | vulnerable |
| Ubuntu | check-mk | 18.04 | 1.2.8p16-1ubuntu0.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | check-mk | deb | pro | 1.2.6p12-1ubuntu0.16.04.1+esm1 | Not reported | USN-5527-2 | Not reported |
| Ubuntu | check-mk | deb | pro | 1.2.6p12-1ubuntu0.16.04.1+esm1 | Not reported | UBUNTU-CVE-2017-9781 | Not reported |
| Ubuntu | check-mk | deb | 18.04 | 1.2.8p16-1ubuntu0.2 | Not reported | UBUNTU-CVE-2017-9781 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: