CVE-2017-12847

CVE-2017-12847 is a local privilege escalation vulnerability affecting Nagios Core versions prior to 4.3.3. It arises from the creation of a PID file (nagios.lock) after privilege dropping, allowing a local attacker with access to the non-root Nagios account to modify this file. This manipulation could lead to the termination of arbitrary processes when a root script subsequently executes a "kill" command based on the modified PID. The vulnerability has a CVSS score of 6.3 (Medium), indicating high impact on integrity and availability with high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.