(RHSA-2018:0299) Moderate: collectd security update

2018-02-1316:03:47

access.redhat.com

0.009 Low

EPSS

Percentile

82.6%

JSON

collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files (creating them if necessary). Because the daemon does not start up each time it updates files, it has a low system footprint.

Security Fix(es):

A double-free vulnerability was found in the csnmp_read_table function in the SNMP plugin of collectd. A network-based attacker could exploit this by sending malformed data, causing collectd to crash or possibly other impact. (CVE-2017-16820)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64collectd-log_logstash< 5.7.2-3.el7ostcollectd-log_logstash-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-ceph< 5.7.2-3.el7ostcollectd-ceph-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-java< 5.7.2-3.el7ostcollectd-java-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-debuginfo< 5.7.2-3.el7ostcollectd-debuginfo-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-apache< 5.7.2-3.el7ostcollectd-apache-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd< 5.7.2-3.el7ostcollectd-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-smart< 5.7.2-3.el7ostcollectd-smart-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64perl-collectd< 5.7.2-3.el7ostperl-Collectd-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64libcollectdclient< 5.7.2-3.el7ostlibcollectdclient-5.7.2-3.el7ost.x86_64.rpm
RedHat7x86_64collectd-postgresql< 5.7.2-3.el7ostcollectd-postgresql-5.7.2-3.el7ost.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	collectd-log_logstash	< 5.7.2-3.el7ost	collectd-log_logstash-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-ceph	< 5.7.2-3.el7ost	collectd-ceph-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-java	< 5.7.2-3.el7ost	collectd-java-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-debuginfo	< 5.7.2-3.el7ost	collectd-debuginfo-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-apache	< 5.7.2-3.el7ost	collectd-apache-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd	< 5.7.2-3.el7ost	collectd-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-smart	< 5.7.2-3.el7ost	collectd-smart-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	perl-collectd	< 5.7.2-3.el7ost	perl-Collectd-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	libcollectdclient	< 5.7.2-3.el7ost	libcollectdclient-5.7.2-3.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-postgresql	< 5.7.2-3.el7ost	collectd-postgresql-5.7.2-3.el7ost.x86_64.rpm