vulnwire
9.8crit

CVE-2017-16820

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.6%
percentile 89%
Public exploits
0
none known

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).

Exploit prediction (EPSS)

3.60% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • access.redhat.com /errata/RHSA-2018:0252 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • security.gentoo.org /glsa/201803-10 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • bugs.debian.org /881757 · x_refsource_CONFIRM, x_transferred
  • github.com /collectd/collectd/issues/2291 · x_refsource_CONFIRM, x_transferred
  • access.redhat.com /errata/RHSA-2018:0560 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1605 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2615 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:0299 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • github.com /collectd/collectd/releases/tag/collectd-5.6.3 · x_refsource_CONFIRM, x_transferred
  • github.com /collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.