Red Hat Security AdvisoryRHSA-2018:2615
collectd security update
Released 2018-09-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7 collectd-5.7.2-3.1.el7rhgs, collectd-ping-5.7.2-3.1.el7rhgs, libcollectdclient-5.7.2-3.1.el7rhgs
- Red Hat Gluster 3.4 Web Administration on RHEL-7 collectd-5.7.2-3.1.el7rhgs, collectd-ping-5.7.2-3.1.el7rhgs, libcollectdclient-5.7.2-3.1.el7rhgs
Fixes 2 records
Priority MEDIUM 48
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03595 · Published 2017-11-14 · Partial fix CWE-415
Priority MEDIUM 40
Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (c…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04032 · Published 2017-04-03 · Partial fix CWE-835
