193 matches found
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...
CVE-2017-18240
The CVE affects Gentoo’s app-admin/collectd prior to 5.7.2-r1. The root cause is that the PID file directory ownership is set to the collectd account, enabling a local attacker to kill arbitrary processes by modifying the PID directory before a root SIGKILL. Impact is local privilege/denial of se...
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...
collectd: double free in csnmp_read_table function in snmp.c
A double-free vulnerability was found in the csnmpreadtable function in the SNMP plugin of collectd. A network-based attacker could exploit this by sending malformed data, causing collectd to crash or possibly other impact...
Moderate: Red Hat Security Advisory: collectd security update
An update for collectd is now available for Red Hat OpenStack Platform 11.0 Operational Tools for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
collectd: double free in csnmp_read_table function in snmp.c
A double-free vulnerability was found in the csnmpreadtable function in the SNMP plugin of collectd. A network-based attacker could exploit this by sending malformed data, causing collectd to crash or possibly other impact...
Moderate: Red Hat Security Advisory: collectd security update
An update for collectd is now available for Red Hat OpenStack Platform 12.0 Operational Tools for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Debian: Security Advisory (DLA-884-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : collectd (2017-f47206eae4)
Upstream released new version. See https://collectd.org/news.shtmlnews106 for the list of changes. Fixes CVE-2017-16820 double free in snmp plugin Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted...
Amazon Linux AMI : collectd (ALAS-2018-940)
Double free in csnmpreadtable function in snmp.c : The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact. CVE-2017-16820 C Tenable Network Security, In...
Medium: collectd
Issue Overview: Double free in csnmpreadtable function in snmp.c: The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact. CVE-2017-16820 Affected...
The vulnerability of the `csnmp_read_table` function in the SNMP plugin for the Collectd daemon allows a attacker to cause an application to terminate abnormally.
The vulnerability of the csnmpreadtable function snmp.c in the SNMP plugin for Collectd is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause the application to crash remotely or cause other adverse effects...
Fedora 26 : collectd (2017-f9cfcef9d6)
Upstream released new version. See https://collectd.org/news.shtmlnews106 for the list of changes. Fixes CVE-2017-16820 double free in snmp plugin Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted...
Fedora 25 : collectd (2017-d7ab32cc23)
Upstream released new version. See https://collectd.org/news.shtmlnews106 for the list of changes. Fixes CVE-2017-16820 double free in snmp plugin Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted...
[SECURITY] Fedora 27 Update: collectd-5.8.0-2.fc27
collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...
Fedora Update for collectd FEDORA-2017-f9cfcef9d6
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for collectd FEDORA-2017-f47206eae4
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...