Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped.

Published

2022-09-20T18:15:09.953

Last Modified

2025-05-29T14:15:26.860

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-377

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	smokeping	smokeping	≤ 2.7.3-r1	Yes

References

https://bugs.gentoo.org/631140 Exploit, Issue Tracking, Third Party Advisory ([email protected])
https://security.gentoo.org/glsa/202209-08 Third Party Advisory ([email protected])
https://bugs.gentoo.org/631140 Exploit, Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202209-08 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)