Red Hat Security AdvisoryRHSA-2017:1285
collectd security, bug fix, and enhancement update
Released 2017-05-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts collectd-5.7.1-4.el7, collectd-apache-5.7.1-4.el7, collectd-ascent-5.7.1-4.el7 +42
- Red Hat Virtualization Manager 4.1 collectd-5.7.1-4.el7, collectd-apache-5.7.1-4.el7, collectd-ascent-5.7.1-4.el7 +41
Fixes 1 record
Priority MEDIUM 40
Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (c…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04032 · Published 2017-04-03 · Partial fix CWE-835
