Infinite loop in collectd - CVE-2017-7401

Vulnerability identifier: #VU6706

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7401

CWE-ID: CWE-399

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause denial of service (DoS) conditions.

The vulnerability exists due to improper input validation when processing UDP requests within the parse_packet() and parse_part_sign_sha256() functions in network.c.A remote attacker can send specially crafted UDP packets to vulnerable instance of collectd and trigger infinite loop.

Successful exploitation of the vulnerability may allow an attacker to cause denial of service (DoS) conditions, but requires that collectd is configured with "SecurityLevel None" and with empty "AuthFile" options.

collectd
Amazon Linux AMI
Fedora
Red Hat Gluster Storage Server for On-premise
Red Hat Virtualization
collectd (Alpine package)
collectd
Red Hat OpenStack

Install update from vendor's repository.

collectd (Alpine package) - update to 5.6.2-r1
collectd - addressed in versions 4.10.9-4.el6, 5.6.2-1.fc24, 5.7.1-2.el7, 5.7.1-3.fc25, 5.7.1-3.fc26

• https://github.com/collectd/collectd/issues/2174

• Red Hat update for collectd
• Remote DoS in collectd
• Amazon Linux AMI update for collectd
• Red Hat update for collectd
• Red Hat update for collectd
• Infinite loop in collectd (Alpine package)
• Fedora 25 update for collectd
• Fedora 26 update for collectd
• Fedora EPEL 6 update for collectd
• Fedora 24 update for collectd
• Fedora EPEL 7 update for collectd