RedHatRHSA-2018:1605(RHSA-2018:1605) Moderate: collectd security update
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.009 Low
EPSS
Percentile
82.7%
Red Hat OpenStack Platform Operational Tools provides the facilities for monitoring a private or public Red Hat OpenStack Platform cloud.
collectd is a small C-language daemon, which reads various system metrics
periodically and updates RRD files (creating them if necessary). Because
the daemon does not start up each time it updates files, it has a low
system footprint.
Security fix:
- collectd: double free in csnmp_read_table function in snmp.c (CVE-2017-16820)
For more details about the security issue, including impact, a CVSS score, and other related information, refer to the CVE page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | collectd-drbd | < 5.8.0-10.el7ost | collectd-drbd-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-snmp | < 5.8.0-10.el7ost | collectd-snmp-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-bind | < 5.8.0-10.el7ost | collectd-bind-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | libcollectdclient | < 5.8.0-10.el7ost | libcollectdclient-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-curl_json | < 5.8.0-10.el7ost | collectd-curl_json-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-curl_xml | < 5.8.0-10.el7ost | collectd-curl_xml-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-ascent | < 5.8.0-10.el7ost | collectd-ascent-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-write_http | < 5.8.0-10.el7ost | collectd-write_http-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-turbostat | < 5.8.0-10.el7ost | collectd-turbostat-5.8.0-10.el7ost.x86_64.rpm |
| RedHat | 7 | x86_64 | collectd-netlink | < 5.8.0-10.el7ost | collectd-netlink-5.8.0-10.el7ost.x86_64.rpm |
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.009 Low
EPSS
Percentile
82.7%