The remote host is affected by the vulnerability described in GLSA-201803-10 (collectd: Multiple vulnerabilities)

    Multiple vulnerabilities have been found in Gentoo&rsquo;s collectd package.
      Please review the referenced CVE identifiers and bug entries for details.
  Impact :

    A local attacker, who either is already collectd&rsquo;s system user or       belongs to collectd&rsquo;s group, could potentially gain root privileges and       cause a Denial of Service condition.
    Remote attackers could cause a Denial of Service condition via specially       crafted SNMP responses.
  Workaround :

    There is no known workaround at this time.

An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files (creating them if necessary). Because the daemon does not start up each time it updates files, it has a low system footprint.

The following packages have been upgraded to a later upstream version:
collectd (5.8.0). (BZ#1544653)

Security Fix(es) :

* collectd: double free in csnmp_read_table function in snmp.c (CVE-2017-16820)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Upstream released new version. See https://collectd.org/news.shtml#news106 for the list of changes.

Fixes CVE-2017-16820 (double free in snmp plugin)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Double free in csnmp_read_table function in snmp.c :

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
(CVE-2017-16820)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2615 advisory.

  - collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256()     functions (CVE-2017-7401)

  - collectd: double free in csnmp_read_table function in snmp.c (CVE-2017-16820)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4793-1 advisory.

  - Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x     before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute     arbitrary code via a crafted network packet. (CVE-2016-6254)

  - The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a     double free in a certain error case, which could lead to a crash (or potentially have other impact).
    (CVE-2017-16820)

  - Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in     collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a     collectd instance (configured with SecurityLevel None and with empty AuthFile options) via a crafted     UDP packet. (CVE-2017-7401)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0252 advisory.

  - collectd: double free in csnmp_read_table function in snmp.c (CVE-2017-16820)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
108525	GLSA-201803-10 : collectd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/22/2018	3/22/2018	critical
108683	RHEL 7 : collectd (RHSA-2018:0560)	Nessus	Red Hat Local Security Checks	3/28/2018	10/24/2019	critical
105137	Fedora 25 : collectd (2017-d7ab32cc23)	Nessus	Fedora Local Security Checks	12/11/2017	1/6/2021	critical
105620	Amazon Linux AMI : collectd (ALAS-2018-940)	Nessus	Amazon Linux Local Security Checks	1/8/2018	4/18/2018	critical
105139	Fedora 26 : collectd (2017-f9cfcef9d6)	Nessus	Fedora Local Security Checks	12/11/2017	1/6/2021	critical
117321	RHEL 7 : collectd (RHSA-2018:2615)	Nessus	Red Hat Local Security Checks	9/6/2018	4/27/2024	critical
183566	Ubuntu 16.04 ESM : collectd vulnerabilities (USN-4793-1)	Nessus	Ubuntu Local Security Checks	10/20/2023	10/20/2023	critical
106005	Fedora 27 : collectd (2017-f47206eae4)	Nessus	Fedora Local Security Checks	1/15/2018	1/6/2021	critical
194037	RHEL 7 : collectd (RHSA-2018:0252)	Nessus	Red Hat Local Security Checks	4/27/2024	4/27/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical