Summary
It was discovered that collectd mishandled certain malformed packets. A
remote attacker could use this vulnerability to cause collectd to crash or
possibly execute arbitrary code. (CVE-2016-6254)
It was discovered that collectd failed to handle certain input. An attacker
could use this vulnerability to cause collectd to crash. (CVE-2017-16820)
It was discovered that collectd mishandles certain malformed network
packets. A remote attacker could use this vulnerability to cause a Denial of
Service or consume system resources. (CVE-2017-7401)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | collectd | 5.4.0-3ubuntu2.2+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | collectd | 5.5.1-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
Unscored —
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allo…
-
Unscored —
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in …
-
Unscored —
Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and e…