Critical Heap Overflow Vulnerability in Fedora Nagios Plugins

• •Heap overflow vulnerability affects Fedora 43 and 44 Nagios plugins.
• •Patches are available and should be applied immediately.
• •No active exploitation has been reported at this time.

A heap overflow vulnerability has been identified in the Nagios plugins for Fedora 43 and 44, affecting systems running these versions. The vulnerability arises from a host-count overflow in the check_icmp plugin, which can lead to a heap buffer overflow in a setuid-root binary. This issue has been documented under bug reports bz#2513957 and bz#2453492. Users are advised to update their systems to mitigate this risk. The vulnerability has been confirmed and patches are available for installation via the 'dnf' update program. The affected versions are Fedora 43 and 44, with specific updates released on August 24, 2026. The advisory emphasizes the importance of keeping systems up to date to prevent exploitation. As of now, there is no indication of active exploitation in the wild.