Double Free Vulnerability in collectd
Summary
CVE-2017-16820: The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact). Affects collectd across 3 version ranges.
< 5.6.2-r1
< a46c9c8d8847d2c5cd742e3c2c8bcea61ccef83f
< d16c24542b2f96a194d43a73c2e5778822b9cb47
Fixed in 5.6.2-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
collectd is an open-source daemon that collects system performance statistics periodically and stores them for further analysis. It is widely used to monitor and gather data from various sources, including operating systems, applications, and network devices. This vulnerability, identified as CVE-2017-16820, affects collectd versions prior to 5.6.3. It is caused by a double free issue in the SNMP plugin, specifically in the csnmp_read_table function. This vulnerability can lead to a crash or potentially have other impacts on the affected system.
Vulnerability Detail
The double free vulnerability in collectd's SNMP plugin arises in a certain error case within the csnmp_read_table function. This flaw allows an attacker to manipulate memory allocation, potentially leading to a crash or other unintended consequences. Exploiting this vulnerability could result in a denial of service (DoS) situation or even remote code execution. The severity of this vulnerability is rated as critical, with a CVSSv3 score of 9.8.
How To Fix
Minimum fixed version
5.6.2-r1
This is the first release that contains the fix.
sudo apk add --upgrade collectdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the SNMP plugin in collectd if it is not essential for their monitoring needs. This can be achieved by modifying the collectd configuration file and commenting out or removing the 'LoadPlugin snmp' line. However, it is strongly advised to apply the official fix by upgrading to the latest version as soon as possible.
Conclusion
The double free vulnerability in collectd's SNMP plugin can have severe consequences, including crashes and potential remote code execution. It is crucial to promptly upgrade to collectd version 5.6.3 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for collectd →
FAQ
collectd is an open-source daemon that collects system performance statistics periodically and stores them for further analysis. It is commonly used for monitoring and gathering data from various sources.
Exploiting this vulnerability can lead to a crash or potentially have other impacts on the affected system. It may result in a denial of service (DoS) situation or even remote code execution.
The severity of this vulnerability is rated as critical, with a CVSSv3 score of 9.8.
To fix this vulnerability, it is recommended to upgrade collectd to version 5.6.3 or later. After upgrading, restart the collectd daemon to ensure the changes take effect.
As a temporary workaround, users can disable the SNMP plugin in collectd by modifying the configuration file. However, it is strongly advised to apply the official fix by upgrading to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for collectd.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
