Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with "SecurityLevel None" and with empty "AuthFile" options) via a crafted UDP packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
collectd 安全漏洞
Vulnerability Description
collectd是一套开源的运行于Linux、Unix系统下的系统信息收集工具。 collectd 5.7.1及之前的版本中的network.c文件的‘parse_packet()’和‘parse_part_sign_sha256()’函数存在安全漏洞。远程攻击者可借助特制的UDP数据包利用该漏洞造成collectd实例拒绝服务（无限循环）。
CVSS Information
N/A
Vulnerability Type
N/A