National Cyber Awareness System

Vulnerability Summary for CVE-2010-4336

Overview

The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2011-0041

Hyperlink:http://www.vupen.com/english/advisories/2011/0041

External Source: VUPEN

Name: ADV-2010-3196

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3196

External Source: BID

Name: 45075

Hyperlink:http://www.securityfocus.com/bid/45075

External Source: DEBIAN

Name: DSA-2133

Hyperlink:http://www.debian.org/security/2010/dsa-2133

External Source: SECUNIA

Name: 42846

Hyperlink:http://secunia.com/advisories/42846

External Source: SECUNIA

Name: 42491

Type: Advisory

Hyperlink:http://secunia.com/advisories/42491

External Source: SECUNIA

Name: 42393

Type: Advisory

Hyperlink:http://secunia.com/advisories/42393

External Source: FEDORA

Name: FEDORA-2010-19031

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052875.html

External Source: CONFIRM

Name: http://collectd.org/news.shtml#news86

Hyperlink:http://collectd.org/news.shtml#news86

External Source: CONFIRM

Name: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605092

Hyperlink:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605092