2 issues skipped by the security teams:
- CVE-2020-6581: Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and the character n (not as the \n newline sequence). This can cause command injection.
- CVE-2020-6582: Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/nagios-nrpe.png){kind=link}