CVE Vulnerabilities

CVE-2017-16820

Double Free

Published: Nov 14, 2017 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
5.6 MODERATE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Ubuntu
MEDIUM

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).

Weakness

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Affected Software

Name Vendor Start Version End Version
Collectd Collectd * 5.6.3 (excluding)
Collectd Ubuntu artful *
Collectd Ubuntu esm-apps/xenial *
Collectd Ubuntu trusty *
Collectd Ubuntu trusty/esm *
Collectd Ubuntu upstream *
Collectd Ubuntu xenial *
Collectd Ubuntu zesty *
Red Hat Gluster Storage 3.4 for RHEL 7 RedHat collectd-0:5.7.2-3.1.el7rhgs *
Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7 RedHat collectd-0:5.8.0-10.el7ost *
Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7 RedHat intel-cmt-cat-0:1.0.1-1.el7ost *
Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7 RedHat collectd-0:5.7.2-3.el7ost *
Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7 RedHat collectd-0:5.7.2-3.el7ost *
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 RedHat collectd-0:5.8.0-3.el7 *
Red Hat Virtualization Engine 4.1 RedHat collectd-0:5.8.0-3.el7 *

Potential Mitigations

References