Denial of Service Vulnerability in collectd 5.7.1 and Earlier

Denial of Service Vulnerability in collectd 5.7.1 and Earlier

CVE-2017-7401 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with "SecurityLevel None" and with empty "AuthFile" options) via a crafted UDP packet.

Learn more about our Network Penetration Testing.