CVE-2018-6536

CVE-2018-6536 describes a local privilege escalation vulnerability in Icinga 2.x up to version 2.8.1. The issue arises because the Icinga 2 daemon creates its PID file after dropping root privileges, allowing a local attacker with access to the non-root Icinga account to modify the PID file. This modification could then be leveraged by a root script executing a "kill" command based on the PID file's content, leading to the termination of arbitrary processes. The vulnerability has a CVSS v3.0 score of 5.5 (Medium), indicating a low attack complexity and requiring local access, but with a high impact on availability (A:H) as it allows for arbitrary process termination. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.