Medium: collectd

2018-01-05T20:47:00
ID ALAS-2018-940
Type amazon
Reporter Amazon
Modified 2018-01-05T20:47:00

Description

Issue Overview:

Double free in csnmp_read_table function in snmp.c:
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact). (CVE-2017-16820 __)

Affected Packages:

collectd

Issue Correction:
Run yum update collectd to update your system.

New Packages:

i686:  
    collectd-chrony-5.8.0-2.19.amzn1.i686  
    collectd-web-5.8.0-2.19.amzn1.i686  
    collectd-generic-jmx-5.8.0-2.19.amzn1.i686  
    collectd-postgresql-5.8.0-2.19.amzn1.i686  
    collectd-dns-5.8.0-2.19.amzn1.i686  
    collectd-write_http-5.8.0-2.19.amzn1.i686  
    collectd-drbd-5.8.0-2.19.amzn1.i686  
    collectd-varnish-5.8.0-2.19.amzn1.i686  
    collectd-lua-5.8.0-2.19.amzn1.i686  
    collectd-email-5.8.0-2.19.amzn1.i686  
    collectd-synproxy-5.8.0-2.19.amzn1.i686  
    collectd-ipvs-5.8.0-2.19.amzn1.i686  
    collectd-write_tsdb-5.8.0-2.19.amzn1.i686  
    collectd-debuginfo-5.8.0-2.19.amzn1.i686  
    collectd-utils-5.8.0-2.19.amzn1.i686  
    collectd-rrdtool-5.8.0-2.19.amzn1.i686  
    collectd-gmond-5.8.0-2.19.amzn1.i686  
    libcollectdclient-devel-5.8.0-2.19.amzn1.i686  
    libcollectdclient-5.8.0-2.19.amzn1.i686  
    collectd-ipmi-5.8.0-2.19.amzn1.i686  
    collectd-notify_email-5.8.0-2.19.amzn1.i686  
    collectd-netlink-5.8.0-2.19.amzn1.i686  
    collectd-mysql-5.8.0-2.19.amzn1.i686  
    collectd-bind-5.8.0-2.19.amzn1.i686  
    collectd-dbi-5.8.0-2.19.amzn1.i686  
    collectd-amqp-5.8.0-2.19.amzn1.i686  
    collectd-snmp_agent-5.8.0-2.19.amzn1.i686  
    collectd-curl_xml-5.8.0-2.19.amzn1.i686  
    collectd-disk-5.8.0-2.19.amzn1.i686  
    collectd-apache-5.8.0-2.19.amzn1.i686  
    collectd-iptables-5.8.0-2.19.amzn1.i686  
    collectd-hugepages-5.8.0-2.19.amzn1.i686  
    collectd-java-5.8.0-2.19.amzn1.i686  
    collectd-python-5.8.0-2.19.amzn1.i686  
    collectd-5.8.0-2.19.amzn1.i686  
    collectd-snmp-5.8.0-2.19.amzn1.i686  
    collectd-openldap-5.8.0-2.19.amzn1.i686  
    collectd-write_sensu-5.8.0-2.19.amzn1.i686  
    collectd-mcelog-5.8.0-2.19.amzn1.i686  
    collectd-lvm-5.8.0-2.19.amzn1.i686  
    collectd-curl-5.8.0-2.19.amzn1.i686  
    perl-Collectd-5.8.0-2.19.amzn1.i686  
    collectd-zookeeper-5.8.0-2.19.amzn1.i686  
    collectd-rrdcached-5.8.0-2.19.amzn1.i686  
    collectd-nginx-5.8.0-2.19.amzn1.i686  
    collectd-memcachec-5.8.0-2.19.amzn1.i686

src:  
    collectd-5.8.0-2.19.amzn1.src

x86_64:  
    collectd-disk-5.8.0-2.19.amzn1.x86_64  
    collectd-curl_xml-5.8.0-2.19.amzn1.x86_64  
    collectd-mcelog-5.8.0-2.19.amzn1.x86_64  
    collectd-generic-jmx-5.8.0-2.19.amzn1.x86_64  
    collectd-zookeeper-5.8.0-2.19.amzn1.x86_64  
    collectd-mysql-5.8.0-2.19.amzn1.x86_64  
    collectd-lua-5.8.0-2.19.amzn1.x86_64  
    collectd-hugepages-5.8.0-2.19.amzn1.x86_64  
    collectd-apache-5.8.0-2.19.amzn1.x86_64  
    collectd-dbi-5.8.0-2.19.amzn1.x86_64  
    collectd-debuginfo-5.8.0-2.19.amzn1.x86_64  
    collectd-rrdtool-5.8.0-2.19.amzn1.x86_64  
    collectd-iptables-5.8.0-2.19.amzn1.x86_64  
    collectd-chrony-5.8.0-2.19.amzn1.x86_64  
    collectd-email-5.8.0-2.19.amzn1.x86_64  
    libcollectdclient-devel-5.8.0-2.19.amzn1.x86_64  
    collectd-varnish-5.8.0-2.19.amzn1.x86_64  
    collectd-utils-5.8.0-2.19.amzn1.x86_64  
    collectd-amqp-5.8.0-2.19.amzn1.x86_64  
    collectd-write_sensu-5.8.0-2.19.amzn1.x86_64  
    collectd-python-5.8.0-2.19.amzn1.x86_64  
    collectd-gmond-5.8.0-2.19.amzn1.x86_64  
    collectd-snmp_agent-5.8.0-2.19.amzn1.x86_64  
    collectd-lvm-5.8.0-2.19.amzn1.x86_64  
    collectd-openldap-5.8.0-2.19.amzn1.x86_64  
    collectd-drbd-5.8.0-2.19.amzn1.x86_64  
    collectd-dns-5.8.0-2.19.amzn1.x86_64  
    collectd-bind-5.8.0-2.19.amzn1.x86_64  
    collectd-java-5.8.0-2.19.amzn1.x86_64  
    collectd-5.8.0-2.19.amzn1.x86_64  
    collectd-rrdcached-5.8.0-2.19.amzn1.x86_64  
    collectd-netlink-5.8.0-2.19.amzn1.x86_64  
    collectd-ipvs-5.8.0-2.19.amzn1.x86_64  
    collectd-memcachec-5.8.0-2.19.amzn1.x86_64  
    collectd-postgresql-5.8.0-2.19.amzn1.x86_64  
    perl-Collectd-5.8.0-2.19.amzn1.x86_64  
    collectd-synproxy-5.8.0-2.19.amzn1.x86_64  
    collectd-ipmi-5.8.0-2.19.amzn1.x86_64  
    collectd-notify_email-5.8.0-2.19.amzn1.x86_64  
    collectd-write_tsdb-5.8.0-2.19.amzn1.x86_64  
    collectd-web-5.8.0-2.19.amzn1.x86_64  
    collectd-snmp-5.8.0-2.19.amzn1.x86_64  
    libcollectdclient-5.8.0-2.19.amzn1.x86_64  
    collectd-nginx-5.8.0-2.19.amzn1.x86_64  
    collectd-write_http-5.8.0-2.19.amzn1.x86_64  
    collectd-curl-5.8.0-2.19.amzn1.x86_64