CVE-2017-16820

    Dashboard / Vulnerabilities / CVE-2017-16820

    CVE-2017-16820

    Published: 14 Nov 2017Last Modified: 8 Jul 2026

    Summary:

    Details: The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).

    References: https://access.redhat.com/errata/RHSA-2018:0252, https://access.redhat.com/errata/RHSA-2018:0299, https://access.redhat.com/errata/RHSA-2018:0560, https://access.redhat.com/errata/RHSA-2018:1605, https://access.redhat.com/errata/RHSA-2018:2615, https://security.gentoo.org/glsa/201803-10, https://bugs.debian.org/881757, https://github.com/collectd/collectd/issues/2291, https://github.com/collectd/collectd/releases/tag/collectd-5.6.3, https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a46c9c8d8847d2c5cd742e3c2c8bcea61ccef83f

    Affected versions

    collectd-5.6.2
    collectd-5.6.1
    collectd-5.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-16820 | CVE-DB