CVE-2016-6254

Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.

• CWE-119

• http://collectd.org/news.shtmlRelease Notes, Vendor Advisory
• http://www.debian.org/security/2016/dsa-3636Third Party Advisory
• https://github.com/collectd/collectd/commit/b589096f907052b3a4da2b9ccc9b0e2e888dfc18Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CM4W5SJ4OTBGINGIN4NJLXCUZAZANO6J/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/
• http://collectd.org/news.shtmlRelease Notes, Vendor Advisory
• http://www.debian.org/security/2016/dsa-3636Third Party Advisory
• https://github.com/collectd/collectd/commit/b589096f907052b3a4da2b9ccc9b0e2e888dfc18Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CM4W5SJ4OTBGINGIN4NJLXCUZAZANO6J/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/

Published

Aug 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6247OpenBSD 5.8 and 5.9 allows certain local users to cause a de…
• CVE-2016-6249F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which tim…
• CVE-2016-6250Integer overflow in the ISO9660 writer in libarchive before …
• CVE-2016-6251Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-6252Integer overflow in shadow 4.2.1 allows local users to gain …
• CVE-2016-6253mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through…
• CVE-2016-6255Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote …
• CVE-2016-6256SAP Business One for Android 1.2.3 allows remote attackers t…
• CVE-2016-6257The firmware in Lenovo Ultraslim dongles, as used with Lenov…6.5
• CVE-2016-6258The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earl…
• CVE-2016-6259Xen 4.5.x through 4.7.x do not implement Supervisor Mode Acc…
• CVE-2016-6261The idna_to_ascii_4i function in lib/idna.c in libidn before…