CVE-2017-20147 describes a denial-of-service vulnerability affecting the SmokePing ebuild package through version 2.7.3-r1 on Gentoo. The vulnerability arises from the smokeping user's ability to write to the service's PID file, allowing them to inject arbitrary PIDs. This enables a low-privileged attacker to cause a denial of service to any process when the SmokePing service is stopped. With a CVSS score of 6.5 (Medium), this vulnerability has a low attack complexity and requires local privileges for exploitation, resulting in high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.7.3-r1CPE matchmatch criteria | cpe:2.3:a:smokeping:smokeping:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.