CVE-2016-6254
CriticalSummary
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.
Risk Assessment
This vulnerability may lead to service outages, affecting system availability, and poses a risk of unauthorized code execution, threatening the security of the entire infrastructure.
Recommendation
It is recommended to update collectd to version 5.4.3 or later to mitigate this vulnerability and to monitor network traffic for potential attacks.
Original NVD description (English source)
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.