CVE-2010-4336

Published Dec 17, 2010 CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Description
The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2133-1 New collectd packages fix denial of service
EUVD EUVD EUVD-2010-4307 The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 3:43 AM
Reserved
Nov 30, 2010, 12:00 AM
Status
Modified
Published
Dec 17, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:24 PM