Critical Double Free Vulnerability in Collectd SNMP Plugin
Summary
ALPINE-CVE-2017-16820: The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact). Affects collectd versions < 5.6.2-r1. Fixed in 5.6.2-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Collectd is an open-source daemon that collects system and application performance metrics periodically and provides mechanisms to store and visualize the collected data. It is widely used for monitoring system performance and health. The SNMP plugin in Collectd allows users to gather metrics from SNMP-enabled devices. However, prior to version 5.6.3, the SNMP plugin was found to be vulnerable to a double free error, which could lead to severe consequences.
Vulnerability Detail
The csnmp_read_table function in snmp.c within the SNMP plugin of Collectd versions before 5.6.3 is susceptible to a double free error in specific error cases. This vulnerability can lead to a crash of the Collectd service, and in some scenarios, it may allow for other impacts, such as potential data corruption or unauthorized access. The vulnerability has been assigned a CVSS score of 9.8, indicating its critical nature.
How To Fix
Minimum fixed version
5.6.2-r1
This is the first release that contains the fix.
sudo apk add --upgrade collectdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the SNMP plugin in Collectd until the package is updated. This can be done by commenting out or removing the SNMP plugin configuration from the Collectd configuration file, usually located at /etc/collectd/collectd.conf.
Conclusion
The double free vulnerability in the Collectd SNMP plugin poses a significant risk to system stability and security. Users are strongly advised to update to the patched version to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing open-source vulnerabilities effectively.
See every vulnerability recorded for collectd →
FAQ
A double free vulnerability occurs when a program attempts to free the same memory location more than once, which can lead to unpredictable behavior, crashes, or security vulnerabilities.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected without any signup.
The potential impacts include service crashes, data corruption, and in some cases, unauthorized access to system resources.
Yes, if the Collectd service crashes or behaves unpredictably due to this vulnerability, there is a risk of data loss or corruption in the collected metrics.
Regularly update your software packages to the latest versions, monitor for vulnerabilities using tools like Vulert, and review your system configurations.
References
Related vulnerabilities
Recent vulnerabilities recorded for collectd.
