CVE-2017-18240

CVE-2017-18240 describes a local privilege escalation vulnerability in Gentoo's app-admin/collectd package prior to version 5.7.2-r1. The flaw stems from incorrect ownership of the PID file directory, allowing a local attacker with collectd account access to modify the PID file. This could lead to a denial of service (DoS) by enabling the attacker to terminate arbitrary processes when a root script attempts to stop the collectd service. Rated Medium severity (CVSS 5.5), this vulnerability has a low attack complexity and requires local access. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.