Vulnerability CVE-2017-7401

Vulnerability Name:

CVE-2017-7401 (CCN-128541)

Assigned:

2017-02-13

Published:

2017-02-13

Updated:

2019-10-03

Summary:

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with "SecurityLevel None" and with empty "AuthFile" options) via a crafted UDP packet.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-835

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2017-7401

Source: BID
Type: Third Party Advisory, VDB Entry
97321

Source: CCN
Type: BID-97321
collectd CVE-2017-7401 Multiple Denial of Service Vulnerabilities

Source: REDHAT
Type: UNKNOWN
RHSA-2017:1285

Source: REDHAT
Type: UNKNOWN
RHSA-2017:1787

Source: REDHAT
Type: UNKNOWN
RHSA-2018:2615

Source: XF
Type: UNKNOWN
collectd-cve20177401-dos(128541)

Source: CCN
Type: collectd GIT Repository
Endless loop in parse_packet() while statement (CPU drain/DoS) #2174

Source: CONFIRM
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/collectd/collectd/issues/2174

Vulnerable Configuration:

Configuration 1:

cpe:/a:collectd:collectd:*:*:*:*:*:*:*:* (Version <= 5.7.1)

Configuration CCN 1:

cpe:/a:collectd:collectd:5.7.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20177401	V	CVE-2017-7401	2023-06-22
oval:org.opensuse.security:def:7464	P	collectd-5.12.0-150400.3.2.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:627	P	Security update for the Linux Kernel (Important)	2022-08-01
oval:org.opensuse.security:def:2890	P	collectd-5.12.0-150400.1.11 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94520	P	collectd-5.12.0-150400.1.11 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:28	P	collectd-5.10.0-1.108 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:100396	P	(Important)	2022-04-11
oval:org.opensuse.security:def:957	P	Security update for wpa_supplicant (Important)	2022-03-04
oval:org.opensuse.security:def:112088	P	collectd-5.12.0-7.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105630	P	collectd-5.12.0-7.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:69719	P	Security update for openssl-1_0_0 (Important)	2021-08-24
oval:org.opensuse.security:def:71787	P	collectd-5.10.0-1.108 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100804	P	collectd-5.10.0-1.108 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62046	P	collectd-5.10.0-1.108 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:69614	P	Security update for libass (Important)	2021-03-24
oval:org.opensuse.security:def:107062	P	collectd-5.10.0-1.108 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61716	P	collectd-5.10.0-1.108 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:116620	P	collectd-5.10.0-1.108 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49014	P	libiso9660-8-0.90-6.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71457	P	collectd-5.10.0-1.108 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:93683	P	collectd-5.10.0-1.108 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:66271	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:66363	P	collectd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73054	P	collectd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49068	P	collectd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:72936	P	Security update for rubygem-actionpack-5_1 (Important)	2020-12-01
oval:com.ubuntu.bionic:def:201774010000000	V	CVE-2017-7401 on Ubuntu 18.04 LTS (bionic) - medium.	2017-04-03
oval:com.ubuntu.artful:def:20177401000	V	CVE-2017-7401 on Ubuntu 17.10 (artful) - medium.	2017-04-03
oval:com.ubuntu.trusty:def:20177401000	V	CVE-2017-7401 on Ubuntu 14.04 LTS (trusty) - medium.	2017-04-03
oval:com.ubuntu.xenial:def:201774010000000	V	CVE-2017-7401 on Ubuntu 16.04 LTS (xenial) - medium.	2017-04-03
oval:com.ubuntu.bionic:def:20177401000	V	CVE-2017-7401 on Ubuntu 18.04 LTS (bionic) - medium.	2017-04-03
oval:com.ubuntu.xenial:def:20177401000	V	CVE-2017-7401 on Ubuntu 16.04 LTS (xenial) - medium.	2017-04-03
oval:com.ubuntu.disco:def:201774010000000	V	CVE-2017-7401 on Ubuntu 19.04 (disco) - medium.	2017-04-03
oval:com.ubuntu.cosmic:def:20177401000	V	CVE-2017-7401 on Ubuntu 18.10 (cosmic) - medium.	2017-04-03
oval:com.ubuntu.cosmic:def:201774010000000	V	CVE-2017-7401 on Ubuntu 18.10 (cosmic) - medium.	2017-04-03
oval:com.ubuntu.precise:def:20177401000	V	CVE-2017-7401 on Ubuntu 12.04 LTS (precise) - medium.	2017-04-03

BACK