collectd records
5 published records for vendor collectd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
- CWE-399 Resource Management Errors1
- CWE-415 Double Free1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-16820No exploit | The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case,collectd · collectd · CWE-415 | Critical9.8 | — | 3.5% | Nov 14, 2017 |
38Monitor | CVE-2016-6254No exploit | Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers tcollectd · collectd · CWE-119 | Critical9.1 | — | 5.7% | Aug 19, 2016 |
31Monitor | CVE-2017-7401No exploit | Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote collectd · collectd · CWE-835 | High7.5 | — | 4.0% | Apr 3, 2017 |
22Monitor | CVE-2017-18240No exploit | The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow locollectd · collectd · CWE-20 | Medium5.5 | — | 0.3% | Mar 18, 2018 |
21Monitor | CVE-2010-4336No exploit | The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a dencollectd · collectd · CWE-399 | Medium5.0 | — | 2.1% | Dec 17, 2010 |
- CVE-2017-1682040Plan
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case,
CriticalCVSS 9.8No exploitEPSS 3%collectd · collectdNov 14, 2017
- CVE-2016-625438Monitor
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers t
CriticalCVSS 9.1No exploitEPSS 5%collectd · collectdAug 19, 2016
- CVE-2017-740131Monitor
Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote
HighCVSS 7.5No exploitEPSS 4%collectd · collectdApr 3, 2017
- CVE-2017-1824022Monitor
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow lo
MediumCVSS 5.5No exploitEPSS 0%collectd · collectdMar 18, 2018
- CVE-2010-433621Monitor
The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a den
MediumCVSS 5.0No exploitEPSS 2%collectd · collectdDec 17, 2010