{"id":"CVE-2017-16820","details":"The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).","modified":"2026-07-08T11:48:05.207277Z","published":"2017-11-14T21:29:00.433Z","references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0252"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0299"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0560"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1605"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2615"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201803-10"},{"type":"REPORT","url":"https://bugs.debian.org/881757"},{"type":"REPORT","url":"https://github.com/collectd/collectd/issues/2291"},{"type":"REPORT","url":"https://github.com/collectd/collectd/releases/tag/collectd-5.6.3"},{"type":"FIX","url":"https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/collectd/collectd","events":[{"introduced":"0"},{"fixed":"a46c9c8d8847d2c5cd742e3c2c8bcea61ccef83f"},{"fixed":"d16c24542b2f96a194d43a73c2e5778822b9cb47"}],"database_specific":{"cpe":"cpe:2.3:a:collectd:collectd:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.6.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["collectd-5.6.2","collectd-5.6.1","collectd-5.6.0","collectd-5.5.0","collectd-5.2.0","collectd-5.3.0","collectd-5.1.0","collectd-5.0.0-beta1","collectd-5.0.0-beta0","collectd-4.10.0","collectd-4.6.0","collectd-4.3.0","collectd-4.3.0beta1","collectd-4.3.0beta0","collectd-4.2.0","collectd-4.1.1","collectd-4.1.0","collectd-4.0.0","collectd-4.0.0-rc10","collectd-4.0.0-rc8","collectd-4.0.0-rc7","collectd-4.0.0-rc6","collectd-4.0.0-rc4","collectd-3.10.0","collectd-3.7.0","collectd-2.0.1"],"database_specific":{"vanir_signatures_modified":"2026-07-08T11:48:05Z","vanir_signatures":[{"target":{"file":"src/snmp.c"},"deprecated":false,"digest":{"line_hashes":["86965231054126360746339291800325181458","102710897325289736916419661317557945286","265602096124552108750953459181517773639","328302089741133144756261656903698557219","158771085255318485581015235353944510325","255975415015094843921857733783813695512","281654652575872297008949702824258664089","312144292821773168939352634702370944618","182098167481022158597358768801023546767","323040959740894247892346577149410755959","167082444302733303646307155509472967399","171599559795877206113230775442974401811","261996696739310258599490644212549753353","180869493693854725304677892671680392522","250630962737135300554396594569277072210","283651911670361381150435979065286315824","44313569439307601127989787637539654925","223850489760899566995195626923488144771"],"threshold":0.9},"id":"CVE-2017-16820-a741bd8b","signature_type":"Line","signature_version":"v1","source":"https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47"},{"deprecated":false,"digest":{"function_hash":"214644603704358171524915980156585427134","length":5165},"id":"CVE-2017-16820-b860da9e","signature_type":"Function","signature_version":"v1","source":"https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47","target":{"file":"src/snmp.c","function":"csnmp_read_table"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16820.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}