Skip to main content

Collectd

3 CVEs product

Monthly

CVE-2017-16820 Nov 14, 21:29 CRITICAL PATCH Act Now

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Collectd
NVD GitHub
CVSS 3.0
9.8
EPSS
3.4%
CVE-2017-7401 Apr 03, 14:59 HIGH PATCH This Week

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Collectd
NVD GitHub
CVSS 3.0
7.5
EPSS
1.0%
CVE-2016-6254 Aug 19, 21:59 CRITICAL PATCH Act Now

Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 13.1%.

RCE Buffer Overflow Denial Of Service Debian Debian Linux +3
NVD GitHub
CVSS 3.0
9.1
EPSS
13.1%
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Collectd
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Collectd
NVD GitHub
EPSS 13% CVSS 9.1
CRITICAL PATCH Act Now

Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 13.1%.

RCE Buffer Overflow Denial Of Service +5
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy