EUVD-2017-9371

Malware in sbrugna...

GLSA-201803-10 : collectd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-10 collectd: Multiple vulnerabilities Multiple vulnerabilities have been found in Gentoos collectd package. Please review the referenced CVE identifiers and bug entries for details. Impact : A local attacker, who either is...

Gentoo app-admin/collectd package local elevation of privilege vulnerability

The Gentoo app-admin/collectd package is a Gentoo Foundation package that collects system statistics and provides stored values. A security vulnerability exists in versions of the Gentoo app-admin/collectd package prior to 5.7.2-r1, which stems from the program assigning ownership of the PID file...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...