Amazon Linux AMI : collectd (ALAS-2016-739)

A heap-based buffer overflow in the parsepacket function in network.c in collectd allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Medium: collectd

Issue Overview: A heap-based buffer overflow in the parsepacket function in network.c in collectd allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet. Affected Packages: collectd Issue Correction: Run yum update collect...

SUSE-SU-2016:2187-1 Security update for collectd

This update for collectd fixes the following issues: - heap overflow in the network plug-in bsc990853, CVE-2016-6254 - add rrdcached plugin to filelist - disable ipvs plugin for now: does not build...

ALPINE-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

DEBIAN-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

UBUNTU-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

Heap overflow

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

CVE-2016-6254

CVE-2016-6254 is a heap-based buffer overflow in the parse_packet function of network.c in collectd, exploitable via crafted network packets. Affected versions are collectd before 5.4.3 and 5.x before 5.5.2, enabling remote denial of service (daemon crash) and potentially arbitrary code execution...

FreeBSD : collectd -- Network plugin heap overflow (6da45e38-5b55-11e6-8859-000c292ee6b8)

The collectd Project reports : Emilien Gaspar has identified a heap overflow in collectd's network plugin which can be triggered remotely and is potentially exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 24 : collectd (2016-e16a14ffc5)

Upstream released new version https://collectd.org/news.shtmlnews98 - Contains fix for CVE-2016-6254 - Drop a few patches applied upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 23 : collectd (2016-23f0d552e8)

Upstream released new version https://collectd.org/news.shtmlnews98 - Contains fix for CVE-2016-6254 - Drop a few patches applied upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora Update for collectd FEDORA-2016-e16a14ffc5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for collectd FEDORA-2016-23f0d552e8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: collectd-5.5.2-1.fc24

collectd is a small daemon written in C for performance. It reads various system statistics and updates RRD files, creating them if necessary. Since the daemon doesn't need to startup every time it wants to update the files it's very fast and easy on the system. Also, the statistics are very fine...

[SECURITY] Fedora 23 Update: collectd-5.5.2-1.fc23

collectd is a small daemon written in C for performance. It reads various system statistics and updates RRD files, creating them if necessary. Since the daemon doesn't need to startup every time it wants to update the files it's very fast and easy on the system. Also, the statistics are very fine...

[SECURITY] [DLA 575-2] collectd regression update

Package : collectd Version : 5.1.0-3+deb7u2 Debian Bug : 833013 The previous upload of collectd surfaced a problem in the way the network plugin initializes gcrypt preventing the plugin from being loaded when packet signing or encryption is enabled. Previously, this may have led to program crashe...

Debian Security Advisory DSA 3636-1 (collectd - security update)

Emilien Gaspar discovered that collectd, a statistics collection and monitoring daemon, incorrectly processed incoming network packets. This resulted in a heap overflow, allowing a remote attacker to either cause a DoS via application crash, or potentially execute arbitrary code. Additionally,...