Zafiyetler / CVE-2017-16820

kritik

CVE-2017-16820

collectd: double free in csnmp_read_table function in snmp.c

Yayın Değişiklik CWE 415
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.6CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (orta), Amazon (orta), Ubuntu (orta).

Açıklama

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
alpine 3.5collectd5.6.2-r1
alpine 3.6collectd5.6.2-r1
amazon linux 1collectd, collectd-amqp, collectd-apache ve 43 tane daha5.8.0-2.19.amzn1
debian 11collectd5.8.0-1
debian 12collectd5.8.0-1
debian 13collectd5.8.0-1
debian 8collectddüzeltme belirtilmemiş
debian 9collectddüzeltme belirtilmemiş
echocollectd5.8.0-1
Red Hatcollectd, collectd-amqp, collectd-apache ve 22 tane dahadüzeltme belirtilmemiş
ubuntu 14.04-ESMcollectd5.4.0-3ubuntu2.2+esm1
ubuntu 16.04-ESMcollectd5.5.1-1ubuntu0.1~esm1
12 kaynaktaki 81 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
alpine 3.5collectd5.6.2-r1
alpine 3.6collectd5.6.2-r1
amazon linux 1collectd5.8.0-2.19.amzn1
amazon linux 1collectd-amqp5.8.0-2.19.amzn1
amazon linux 1collectd-apache5.8.0-2.19.amzn1
amazon linux 1collectd-bind5.8.0-2.19.amzn1
amazon linux 1collectd-chrony5.8.0-2.19.amzn1
amazon linux 1collectd-curl5.8.0-2.19.amzn1
amazon linux 1collectd-curl_xml5.8.0-2.19.amzn1
amazon linux 1collectd-dbi5.8.0-2.19.amzn1
amazon linux 1collectd-debuginfo5.8.0-2.19.amzn1
amazon linux 1collectd-disk5.8.0-2.19.amzn1
amazon linux 1collectd-dns5.8.0-2.19.amzn1
amazon linux 1collectd-drbd5.8.0-2.19.amzn1
amazon linux 1collectd-email5.8.0-2.19.amzn1
amazon linux 1collectd-generic-jmx5.8.0-2.19.amzn1
amazon linux 1collectd-gmond5.8.0-2.19.amzn1
amazon linux 1collectd-hugepages5.8.0-2.19.amzn1
amazon linux 1collectd-ipmi5.8.0-2.19.amzn1
amazon linux 1collectd-iptables5.8.0-2.19.amzn1
amazon linux 1collectd-ipvs5.8.0-2.19.amzn1
amazon linux 1collectd-java5.8.0-2.19.amzn1
amazon linux 1collectd-lua5.8.0-2.19.amzn1
amazon linux 1collectd-lvm5.8.0-2.19.amzn1
amazon linux 1collectd-mcelog5.8.0-2.19.amzn1
amazon linux 1collectd-memcachec5.8.0-2.19.amzn1
amazon linux 1collectd-mysql5.8.0-2.19.amzn1
amazon linux 1collectd-netlink5.8.0-2.19.amzn1
amazon linux 1collectd-nginx5.8.0-2.19.amzn1
amazon linux 1collectd-notify_email5.8.0-2.19.amzn1
amazon linux 1collectd-openldap5.8.0-2.19.amzn1
amazon linux 1collectd-postgresql5.8.0-2.19.amzn1
amazon linux 1collectd-python5.8.0-2.19.amzn1
amazon linux 1collectd-rrdcached5.8.0-2.19.amzn1
amazon linux 1collectd-rrdtool5.8.0-2.19.amzn1
amazon linux 1collectd-snmp5.8.0-2.19.amzn1
amazon linux 1collectd-snmp_agent5.8.0-2.19.amzn1
amazon linux 1collectd-synproxy5.8.0-2.19.amzn1
amazon linux 1collectd-utils5.8.0-2.19.amzn1
amazon linux 1collectd-varnish5.8.0-2.19.amzn1
amazon linux 1collectd-web5.8.0-2.19.amzn1
amazon linux 1collectd-write_http5.8.0-2.19.amzn1
amazon linux 1collectd-write_sensu5.8.0-2.19.amzn1
amazon linux 1collectd-write_tsdb5.8.0-2.19.amzn1
amazon linux 1collectd-zookeeper5.8.0-2.19.amzn1
amazon linux 1libcollectdclient5.8.0-2.19.amzn1
amazon linux 1libcollectdclient-devel5.8.0-2.19.amzn1
amazon linux 1perl-Collectd5.8.0-2.19.amzn1
debian 11collectd5.8.0-1
debian 12collectd5.8.0-1
debian 13collectd5.8.0-1
debian 8collectddüzeltme belirtilmemiş
debian 9collectddüzeltme belirtilmemiş
echocollectd5.8.0-1
Red Hatcollectddüzeltme belirtilmemiş
Red Hatcollectd-amqpdüzeltme belirtilmemiş
Red Hatcollectd-apachedüzeltme belirtilmemiş
Red Hatcollectd-curldüzeltme belirtilmemiş
Red Hatcollectd-curl_jsondüzeltme belirtilmemiş
Red Hatcollectd-curl_xmldüzeltme belirtilmemiş
Red Hatcollectd-dbidüzeltme belirtilmemiş
Red Hatcollectd-dnsdüzeltme belirtilmemiş
Red Hatcollectd-generic-jmxdüzeltme belirtilmemiş
Red Hatcollectd-ipmidüzeltme belirtilmemiş
Red Hatcollectd-iptablesdüzeltme belirtilmemiş
Red Hatcollectd-ipvsdüzeltme belirtilmemiş
Red Hatcollectd-javadüzeltme belirtilmemiş
Red Hatcollectd-lvmdüzeltme belirtilmemiş
Red Hatcollectd-mysqldüzeltme belirtilmemiş
Red Hatcollectd-netlinkdüzeltme belirtilmemiş
Red Hatcollectd-pingdüzeltme belirtilmemiş
Red Hatcollectd-pythondüzeltme belirtilmemiş
Red Hatcollectd-rrdcacheddüzeltme belirtilmemiş
Red Hatcollectd-rrdtooldüzeltme belirtilmemiş
Red Hatcollectd-sensorsdüzeltme belirtilmemiş
Red Hatcollectd-snmpdüzeltme belirtilmemiş
Red Hatcollectd-virtdüzeltme belirtilmemiş
Red Hatcollectd-write_riemanndüzeltme belirtilmemiş
Red Hatperl-Collectddüzeltme belirtilmemiş
ubuntu 14.04-ESMcollectd5.4.0-3ubuntu2.2+esm1
ubuntu 16.04-ESMcollectd5.5.1-1ubuntu0.1~esm1

Referanslar

14 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.