CVE-2010-4336:collectd: The cu_rrd_create_file function (src/utils

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-4336

collectd: The cu_rrd_create_file function (src/utils_rrdcreat...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4336

Original

The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-12-17

Source Information Category:

Advisory, Alert

Last Updated:

2010-12-20

Affected Product Tags

cpe:/a:collectd:collectd:4.0.0

cpe:/a:collectd:collectd:4.0.1

cpe:/a:collectd:collectd:4.0.2

cpe:/a:collectd:collectd:4.0.3

cpe:/a:collectd:collectd:4.0.4

cpe:/a:collectd:collectd:4.0.5

cpe:/a:collectd:collectd:4.0.6

cpe:/a:collectd:collectd:4.0.7

cpe:/a:collectd:collectd:4.0.8

cpe:/a:collectd:collectd:4.0.9

cpe:/a:collectd:collectd:4.1.0

cpe:/a:collectd:collectd:4.1.1

cpe:/a:collectd:collectd:4.1.2

cpe:/a:collectd:collectd:4.1.3

cpe:/a:collectd:collectd:4.1.4

cpe:/a:collectd:collectd:4.1.5

cpe:/a:collectd:collectd:4.1.6

cpe:/a:collectd:collectd:4.10

cpe:/a:collectd:collectd:4.10.1

cpe:/a:collectd:collectd:4.2.0

cpe:/a:collectd:collectd:4.2.1

cpe:/a:collectd:collectd:4.2.2

cpe:/a:collectd:collectd:4.2.3

cpe:/a:collectd:collectd:4.2.4

cpe:/a:collectd:collectd:4.2.5

cpe:/a:collectd:collectd:4.2.6

cpe:/a:collectd:collectd:4.2.7

cpe:/a:collectd:collectd:4.3.0

cpe:/a:collectd:collectd:4.3.1

cpe:/a:collectd:collectd:4.3.2

cpe:/a:collectd:collectd:4.3.3

cpe:/a:collectd:collectd:4.3.4

cpe:/a:collectd:collectd:4.4.0

cpe:/a:collectd:collectd:4.4.1

cpe:/a:collectd:collectd:4.4.2

cpe:/a:collectd:collectd:4.4.3

cpe:/a:collectd:collectd:4.4.4

cpe:/a:collectd:collectd:4.4.5

cpe:/a:collectd:collectd:4.5.0

cpe:/a:collectd:collectd:4.5.1

cpe:/a:collectd:collectd:4.5.2

cpe:/a:collectd:collectd:4.5.3

cpe:/a:collectd:collectd:4.5.4

cpe:/a:collectd:collectd:4.6.0

cpe:/a:collectd:collectd:4.6.1

cpe:/a:collectd:collectd:4.6.2

cpe:/a:collectd:collectd:4.6.3

cpe:/a:collectd:collectd:4.6.4

cpe:/a:collectd:collectd:4.6.5

cpe:/a:collectd:collectd:4.7.0

cpe:/a:collectd:collectd:4.7.1

cpe:/a:collectd:collectd:4.7.2

cpe:/a:collectd:collectd:4.7.3

cpe:/a:collectd:collectd:4.7.4

cpe:/a:collectd:collectd:4.7.5

cpe:/a:collectd:collectd:4.8.0

cpe:/a:collectd:collectd:4.8.1

cpe:/a:collectd:collectd:4.8.2

cpe:/a:collectd:collectd:4.8.3

cpe:/a:collectd:collectd:4.8.4

cpe:/a:collectd:collectd:4.8.5

cpe:/a:collectd:collectd:4.9.0

cpe:/a:collectd:collectd:4.9.1

cpe:/a:collectd:collectd:4.9.2

cpe:/a:collectd:collectd:4.9.3

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

BID 45075

CONFIRM http://collectd.org/news.shtml#news86

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605092

DEBIAN DSA-2133

SECUNIA 42491

SECUNIA 42393

VUPEN ADV-2010-3196

Vulnerability Type Resource Management Errors (CWE-399)