Description
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | collectd | 5.8.0-1 | — |
| Debian 12 | collectd | 5.8.0-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | collectd | 5.5.1-1ubuntu0.1~esm1 | USN-4793-1 |
| Ubuntu Pro 14.04 LTS | collectd | 5.4.0-3ubuntu2.2+esm1 | USN-4793-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | collectd +43 | 5.8.0-3.el7 | RHSA-2018:0560 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 4 | collectd +42 | 5.8.0-3.el7 | RHSA-2018:0560 |
| Red Hat Openstack-optools 12 | collectd +43 | 5.7.2-3.el7ost | RHSA-2018:0252 |
| Red Hat Openstack-optools 11 | collectd +42 | 5.7.2-3.el7ost | RHSA-2018:0299 |
| Red Hat Openstack-optools 10 | collectd +46 | 5.8.0-10.el7ost | RHSA-2018:1605 |
| Red Hat Openstack-optools 10 | intel-cmt-cat | 1.0.1-1.el7ost | RHSA-2018:1605 |
| Red Hat Gluster Storage 3 | collectd +2 | 5.7.2-3.1.el7rhgs | RHSA-2018:2615 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.6 | collectd | 5.6.2-r1 | — |
| Alpine v3.5 | collectd | 5.6.2-r1 | — |
Advisories 6
- USN-4793-1 collectd vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- RHSA-2018:2615 Red Hat Security Advisory: collectd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:1605 Red Hat Security Advisory: collectd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0560 Red Hat Security Advisory: collectd security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0299 Red Hat Security Advisory: collectd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0252 Red Hat Security Advisory: collectd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2018:0252 vendor-advisory
- GLSA-201803-10 vendor-advisory
- https://bugs.debian.org/881757
- https://github.com/collectd/collectd/issues/2291
- RHSA-2018:0560 vendor-advisory
- RHSA-2018:1605 vendor-advisory
- RHSA-2018:2615 vendor-advisory
- RHSA-2018:0299 vendor-advisory
- https://github.com/collectd/collectd/releases/tag/collectd-5.6.3
- https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47