Vulnerabilities
Products Security index
Vulnerabilities
CVE-2017-18240
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).
CVE-2017-16820
collectd: double free in csnmp_read_table function in snmp.c
CVE-2017-7401
collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256() functions
CVE-2016-6254
collectd: heap overflow in the network plugin
CVE-2010-4336
The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.
