PT-2017-3220 · Collectd+2 · Collectd+2

Cullorblind · Publicado 2017-05-19 · Atualizado 2021-03-15 · CVE-2017-16820

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions collectd versions prior to 5.6.3

Description The issue is related to the csnmp read table function in the SNMP plugin, which is susceptible to a double free error in certain cases. This could lead to a crash or potentially have other impacts. The vulnerability can be exploited by a remote attacker to cause the application to crash or have other effects.

Recommendations For versions prior to 5.6.3, update to version 5.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the SNMP plugin to minimize the risk of exploitation.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2017-1996

BDU:2017-02653

CVE-2017-16820

RHSA-2018:0252

RHSA-2018:0299

RHSA-2018:0560

RHSA-2018:1605

RHSA-2018:2615

USN-4793-1

Produtos afetados

Alt Linux

Ubuntu

Collectd

Referências · 24

• https://github.com/collectd/collectd/releases/tag/collectd-5.6.3 · Nota
• https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47 · Correção
• https://github.com/collectd/collectd/issues/2291 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-16820 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4793-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4793-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0252 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2017-16820 · Aviso do Fabricante
• https://bugs.debian.org/881757 · Nota
• https://ubuntu.com/security/CVE-2017-16820 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-6254 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:2615 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16820 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-16820 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0299 · Aviso do Fabricante