347622 – (CVE-2010-4336) <app-admin/collectd-4.10.2-r2: Denial of Service Vulnerability (CVE-2010-4336)

Bug 347622 (CVE-2010-4336) - <app-admin/collectd-4.10.2-r2: Denial of Service Vulnerability (CVE-2010-4336)

Summary: <app-admin/collectd-4.10.2-r2: Denial of Service Vulnerability (CVE-2010-4336)

Status:	RESOLVED FIXED

Alias:	CVE-2010-4336

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High trivial
Assignee:	Gentoo Security

URL:	http://collectd.org/news.shtml#news86
Whiteboard:	~3 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2010-12-03 07:19 UTC by Tim Sammut (RETIRED)
Modified:	2010-12-24 13:49 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tim Sammut (RETIRED) gentoo-dev

2010-12-03 07:19:05 UTC

From $URL:

Two new patch releases for the stable versions of collectd have been released. They fix various bugs, including one which can be used for a Denial of Service (DoS) attack. Users are encouraged to upgrade.

Comment 1 Andreas K. Hüttel archtester

2010-12-24 11:30:33 UTC

This is fixed in collectd-4.10.2-r2, which is already in the tree. 

Feel free to remove collectd-4.10.1-r4 from CVS (it may take a day or so until I get back to my ssh keys :o).

No stable ebuilds on any arch.

Comment 2 Andreas K. Hüttel archtester

2010-12-24 11:31:14 UTC

PS. Merry Christmas (if applicable)! :)

Comment 3 Alex Legler (RETIRED) archtester

2010-12-24 13:49:15 UTC

+  24 Dec 2010; Alex Legler <a3li@gentoo.org> -collectd-4.10.1-r4.ebuild:
+  Removing vulnerable ebuilds, bug 347622.
+

Closing noglsa.