193 matches found
[SECURITY] Fedora 26 Update: collectd-5.8.0-2.fc26
collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...
[SECURITY] Fedora 25 Update: collectd-5.8.0-2.fc25
collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...
Fedora Update for collectd FEDORA-2017-d7ab32cc23
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
collectd SNMP Plugin Denial of Service Vulnerability
collectd is a set of open source running on Linux, Unix system under the system information collection tools. SNMP plugin is one of the simple network management plugin . A denial of service vulnerability exists in the 'csnmpreadtable' function of the snmp.c file of the SNMP plugin in versions of...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
DEBIAN-CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
Double free
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
UBUNTU-CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
CVE-2017-16820
CVE-2017-16820 affects the collectd SNMP plugin (csnmp_read_table in snmp.c). The vulnerability is a double-free in a specific error path that could cause a crash and potentially broader impact. It applies to collectd builds older than 5.6.3, with Red Hat advisories and upstream notes confirming ...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
Moderate: Red Hat Security Advisory: collectd security update
An update for collectd is now available for Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256() functions
collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with "SecurityLevel None" and empty "AuthFile" options, an attacker can send crafted UDP packets that trigger the infinite loop, causing a denial of...
Fedora 26 : collectd (2017-822d460ae2)
Fix CVE-2017-7401 collectd: Infinite loop due to incorrect interaction of parsepacket and parsepartsignsha256 functions. This is a bug in the network plugin. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable ha...
RHEL 7 : collectd (RHSA-2017:1285)
An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: collectd security, bug fix, and enhancement update
An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256() functions
collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with "SecurityLevel None" and empty "AuthFile" options, an attacker can send crafted UDP packets that trigger the infinite loop, causing a denial of...
SUSE-SU-2017:1365-1 Security update for collectd
This update for collectd fixes one issue. This security issue was fixed: - CVE-2017-7401: Incorrect interaction of the parsepacket and parsepartsignsha256 functions in network.c allowed remote attackers to cause a denial of service infinite loop of a collectd instance configured with 'SecurityLev...
Amazon Linux AMI : collectd (ALAS-2017-829)
Infinite loop due to incorrect interaction of parsepacket and parsepartsignsha256 functions : Collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with 'SecurityLevel None' and with empty 'AuthFile'...