What’s Vulnerable › Vulnerabilities

CVE-2013-6048

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-12-13 · updated 2026-06-16
• Weakness: CWE-20

Description

The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) via crafted multigraph data.

Affected products

• Munin-Monitoring Munin: through 2.0.17; 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+12)

References

• http://www.debian.org/security/2013/dsa-2815
• http://www.ubuntu.com/usn/USN-2090-1
• https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog
• https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab99
• http://www.debian.org/security/2013/dsa-2815
• http://www.ubuntu.com/usn/USN-2090-1
• https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog
• https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab99

Get alerted when CVE-2013-6048 or the next vulnerability affects your stack