RHEL 7 : collectd (RHSA-2018:0560)
Critical Nessus Plugin ID 108683
SynopsisThe remote Red Hat host is missing one or more security updates.
DescriptionAn update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files (creating them if necessary). Because the daemon does not start up each time it updates files, it has a low system footprint.
The following packages have been upgraded to a later upstream version:
collectd (5.8.0). (BZ#1544653)
Security Fix(es) :
* collectd: double free in csnmp_read_table function in snmp.c (CVE-2017-16820)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
SolutionUpdate the affected packages.