Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Octo

#49689of 53,619
5Total CVSS
Vulnerabilities · 1
PT-2010-5662
5.0
1970-01-01
Rrdtool · Rrdtool · CVE-2010-4336
**Name of the Vulnerable Software and Affected Versions** collectd versions 4.x through 4.9.3 collectd versions 4.10.0 through 4.10.1 **Description** The issue allows remote attackers to cause a denial of service via a packet with a timestamp whose value is 10 or less. This can be demonstrated by creating RRD files using the RRDtool and RRDCacheD plugins. The vulnerability can lead to a disruption in the availability of protected information and can be exploited remotely. **Recommendations** For collectd versions 4.x through 4.9.3, update to version 4.9.4 or later. For collectd versions 4.10.0 through 4.10.1, update to version 4.10.2 or later. As a temporary workaround, consider restricting access to the `cu rrd create file` function in the `src/utils rrdcreate.c` file until a patch is available.