CVE-2010-4336
- State
- Published
- Severity
- Not scored
- Published
- Dec 17, 2010
- Updated
- Aug 7, 2024
- Reserved
- Nov 30, 2010
Description
The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SR:2011:009vendor-advisory
- 42491third-party-advisory
- DSA-2133vendor-advisory
- 42846third-party-advisory
- ADV-2011-0041vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605092
- FEDORA-2010-19031vendor-advisory
- ADV-2010-3196vdb-entry
- http://collectd.org/news.shtml#news86
- 45075vdb-entry
- 42393third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.