Red Hat Security AdvisoryRHSA-2018:0560
collectd security, bug fix, and enhancement update
Released 2018-03-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts collectd-5.8.0-3.el7, collectd-apache-5.8.0-3.el7, collectd-ascent-5.8.0-3.el7 +41
- Red Hat Virtualization Manager 4.1 collectd-5.8.0-3.el7, collectd-apache-5.8.0-3.el7, collectd-ascent-5.8.0-3.el7 +40
Fixes 1 record
Priority MEDIUM 48
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03595 · Published 2017-11-14 · Partial fix CWE-415
