(RHSA-2018:0252) Moderate: collectd security update

2018-01-3020:54:49

access.redhat.com

153

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.4%

JSON

collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files (creating them if necessary). Because the daemon does not start up each time it updates files, it has a low system footprint.

Security Fix(es):

The csnmp_read_table function in the SNMP plugin of collectd, before version 5.6.3, is susceptible to a double free in a certain error case. This could lead to a crash. (CVE-2017-16820)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64collectd-iptables< 5.7.2-3.el7ostcollectd-iptables-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-curl< 5.7.2-3.el7ostcollectd-curl-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-debuginfo< 5.7.2-3.el7ostcollectd-debuginfo-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-turbostat< 5.7.2-3.el7ostcollectd-turbostat-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-write_sensu< 5.7.2-3.el7ostcollectd-write_sensu-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64perl-collectd< 5.7.2-3.el7ostperl-Collectd-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-smart< 5.7.2-3.el7ostcollectd-smart-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-rrdcached< 5.7.2-3.el7ostcollectd-rrdcached-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64libcollectdclient< 5.7.2-3.el7ostlibcollectdclient-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-ascent< 5.7.2-3.el7ostcollectd-ascent-5.7.2-3.el7ost.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	collectd-iptables	< 5.7.2-3.el7ost	collectd-iptables-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-curl	< 5.7.2-3.el7ost	collectd-curl-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-debuginfo	< 5.7.2-3.el7ost	collectd-debuginfo-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-turbostat	< 5.7.2-3.el7ost	collectd-turbostat-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-write_sensu	< 5.7.2-3.el7ost	collectd-write_sensu-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	perl-collectd	< 5.7.2-3.el7ost	perl-Collectd-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-smart	< 5.7.2-3.el7ost	collectd-smart-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-rrdcached	< 5.7.2-3.el7ost	collectd-rrdcached-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	libcollectdclient	< 5.7.2-3.el7ost	libcollectdclient-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-ascent	< 5.7.2-3.el7ost	collectd-ascent-5.7.2-3.el7ost.x86_64.rpm