[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvcuv0g7Yzlz_lNoZqKb4Ew-uDM94wEwYvyvf4uBujy4":3,"g5a-risk:CVE-2014-2913":152},{"success":4,"data":5,"meta":150},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":48,"references":49,"referencesCount":100,"weaknesses":101,"weaknessesCount":105,"isActivelyExploited":106,"cisaInfo":15,"otxData":15,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":148,"notableEvents":149},"CVE-2014-2913","What is CVE-2014-2913?","Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to libexec\u002Fcheck_nrpe.  NOTE: this issue is disputed by multiple parties. It has been reported that the vendor allows newlines as \"expected behavior.\" Also, this issue can only occur when the administrator enables the \"dont_blame_nrpe\" option in nrpe.conf despite the \"HIGH security risk\" warning within the comments","Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands v...","2014-05-07T10:55:06.977","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.15312,[29,29,29,29,29,29,29],"High",[33,38,42,45],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"nagios","remote_plugin_executor","*","cpe:2.3:a:nagios:remote_plugin_executor:*:*:*:*:*:*:*:*",{"vendor":39,"product":39,"version":40,"criteria":41,"vulnerable":4},"opensuse","11.4","cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",{"vendor":39,"product":39,"version":43,"criteria":44,"vulnerable":4},"12.3","cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",{"vendor":39,"product":39,"version":46,"criteria":47,"vulnerable":4},"13.1","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",4,[50,54,58,61,64,69,72,75,78,82,84,86,88,90,92,94,96,98],{"url":51,"source":52,"tags":53},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-September\u002F166528.html","Fedoraproject",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2014-05\u002Fmsg00011.html","Opensuse",[],{"url":59,"source":56,"tags":60},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2014-05\u002Fmsg00005.html",[],{"url":62,"source":56,"tags":63},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2014-05\u002Fmsg00014.html",[],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FApr\u002F240","Seclists",[68],"Exploit",{"url":70,"source":66,"tags":71},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FApr\u002F242",[68],{"url":73,"source":66,"tags":74},"http:\u002F\u002Fseclists.org\u002Foss-sec\u002F2014\u002Fq2\u002F154",[],{"url":76,"source":66,"tags":77},"http:\u002F\u002Fseclists.org\u002Foss-sec\u002F2014\u002Fq2\u002F155",[],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F66969","Securityfocus",[],{"url":51,"source":52,"tags":83},[],{"url":55,"source":56,"tags":85},[],{"url":59,"source":56,"tags":87},[],{"url":62,"source":56,"tags":89},[],{"url":65,"source":66,"tags":91},[68],{"url":70,"source":66,"tags":93},[68],{"url":73,"source":66,"tags":95},[],{"url":76,"source":66,"tags":97},[],{"url":79,"source":80,"tags":99},[],18,[102],{"id":103,"name":103,"description":104},"Unknown","NVD-CWE-Other",1,false,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2014-2913? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-2913, a high severity cyber security vulnerability from 2014. Incomplete blacklist vulnerability in nrpe.c in Nagios Remot...","CVE-2014-2913, CVE-2014-2913 vulnerability, CVE-2014-2913 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, nagios security, opensuse security, remote_plugin_executor vulnerability, opensuse vulnerability","\u002Fwhat-is\u002Fcve-2014-2913",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-2913","Cybersecurity","CVE-2014-2913, CVE-2014-2913 vulnerability, CVE-2014-2913 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134],{"Operator":15,"Negate":15,"Nodes":135},[136],{"Operator":137,"Negate":15,"CPEMatch":138},"OR",[139,142,144,146],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":141},"DD2278A9-DEA0-410C-A3CD-386131D8C919","2.15",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":143,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DE554781-1EB9-446E-911F-6C11970C47F4",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DFBF430B-0832-44B0-AA0E-BA9E467F7668",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":147,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A10BC294-9196-425F-9FB0-B1625465B47F",[],[],{"lastModified":11,"cacheTime":151,"version":21},1792375223075,{"score":153,"band":154,"action":155,"scoredAt":156},49,"Medium","Plan remediation","2026-10-17T07:08:52.650869+00:00"]