Werk #940: Fixed various core SIGSEGV when using malformed livestatus queries

Name: checkmk
Rating: 4.7 (114 reviews)

Component

Core & setup

Title

Fixed various core SIGSEGV when using malformed livestatus queries

Date

Jun 18, 2014

Level

Prominent Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

1.2.5i4	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

Some malformed livestatus queries could crash the monitoring core. This happened whenever the value field for certain keys was missing.

For example


lq "GET hosts\nColumnHeaders:\n"

lq "GET hosts\nAnd:\n"

lq "GET hosts\nKeepalive:\n