Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2017-7401
HistoryApr 03, 2017 - 2:59 p.m.

CVE-2017-7401

2017-04-0314:59:00
Alpine Linux Development Team
security.alpinelinux.org
10

0.008 Low

EPSS

Percentile

81.3%

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with “SecurityLevel None” and with empty “AuthFile” options) via a crafted UDP packet.

OSVersionArchitecturePackageVersionFilename
Alpine3.5-mainnoarchcollectd< 5.6.2-r1UNKNOWN
Alpine3.6-mainnoarchcollectd< 5.6.2-r1UNKNOWN