(RHSA-2017:1787) Moderate: collectd security update

2017-07-1922:32:11

access.redhat.com

EPSS

0.008

Percentile

81.5%

JSON

collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files (creating them if necessary). Because the daemon does not start up each time it updates files, it has a low system footprint.

The following packages have been upgraded to a later upstream version: collectd (5.7.2). (BZ#1460080)

Security Fix(es):

collectd contains an infinite loop due to how the parse_packet() and parse_part_sign_sha256() functions interact. If an instance of collectd is configured with “SecurityLevel None” and empty “AuthFile” options, an attacker can send crafted UDP packets that trigger the infinite loop, causing a denial of service. (CVE-2017-7401)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64collectd-ipmi< 5.7.2-1.1.el7ostcollectd-ipmi-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-ping< 5.7.2-1.1.el7ostcollectd-ping-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-generic-jmx< 5.7.2-1.1.el7ostcollectd-generic-jmx-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64perl-collectd< 5.7.2-1.1.el7ostperl-Collectd-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-openldap< 5.7.2-1.1.el7ostcollectd-openldap-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-mysql< 5.7.2-1.1.el7ostcollectd-mysql-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-write_http< 5.7.2-1.1.el7ostcollectd-write_http-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-curl_json< 5.7.2-1.1.el7ostcollectd-curl_json-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64collectd-postgresql< 5.7.2-1.1.el7ostcollectd-postgresql-5.7.2-1.1.el7ost.x86_64.rpm
RedHat7x86_64libcollectdclient< 5.7.2-1.1.el7ostlibcollectdclient-5.7.2-1.1.el7ost.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	collectd-ipmi	< 5.7.2-1.1.el7ost	collectd-ipmi-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-ping	< 5.7.2-1.1.el7ost	collectd-ping-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-generic-jmx	< 5.7.2-1.1.el7ost	collectd-generic-jmx-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	perl-collectd	< 5.7.2-1.1.el7ost	perl-Collectd-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-openldap	< 5.7.2-1.1.el7ost	collectd-openldap-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-mysql	< 5.7.2-1.1.el7ost	collectd-mysql-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-write_http	< 5.7.2-1.1.el7ost	collectd-write_http-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-curl_json	< 5.7.2-1.1.el7ost	collectd-curl_json-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	collectd-postgresql	< 5.7.2-1.1.el7ost	collectd-postgresql-5.7.2-1.1.el7ost.x86_64.rpm
RedHat	7	x86_64	libcollectdclient	< 5.7.2-1.1.el7ost	libcollectdclient-5.7.2-1.1.el7ost.x86_64.rpm