Denial of Service Vulnerability in Collectd Package: CVE-2017-7401
Summary
ALPINE-CVE-2017-7401: Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (c... Affects collectd versions < 5.6.2-r1. Fixed in 5.6.2-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Collectd is a daemon that collects system and application performance metrics periodically and provides mechanisms to store and visualize the collected data. It is widely used for monitoring system performance and resource utilization. The vulnerability in question affects versions 5.7.1 and earlier, where improper handling of certain network packets can lead to a denial of service.
Vulnerability Detail
The vulnerability arises from incorrect interaction between the parse_packet() and parse_part_sign_sha256() functions in the network.c file of Collectd. This flaw allows remote attackers to send specially crafted UDP packets to a Collectd instance configured with 'SecurityLevel None' and an empty 'AuthFile', resulting in an infinite loop and causing the service to become unresponsive. The potential ramifications include service downtime and loss of monitoring capabilities for affected systems.
How To Fix
Minimum fixed version
5.6.2-r1
This is the first release that contains the fix.
sudo apk add --upgrade collectdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider configuring the Collectd instance with a higher security level or implementing firewall rules to restrict access to the UDP port used by Collectd, thereby preventing unauthorized packets from reaching the service.
Conclusion
CVE-2017-7401 represents a significant denial of service vulnerability in the Collectd package, affecting versions 5.7.1 and earlier. Users are advised to update to the patched version to mitigate risks associated with this vulnerability. Implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for collectd →
FAQ
CVE-2017-7401 is a vulnerability in the Collectd package that allows remote attackers to cause a denial of service through crafted UDP packets.
Versions 5.7.1 and earlier of Collectd are affected by this vulnerability.
The vulnerability can lead to an infinite loop, causing the Collectd service to become unresponsive, which may result in loss of monitoring capabilities.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for collectd.
