Name: CVE-2026-43958: Stack-based Buffer Overflow
Creator: Rapid7
Published: 2026-06-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-43958, CWE-121, CVSS 7.8, EPSS 0.00176

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade rrdtoolUpgrade rrdtool-perlUpgrade rrdtool-rubyUpgrade rrdtool-docUpgrade rrdtool-develUpgrade rrdtool-luaUpgrade python3-rrdtoolUpgrade rrdtool-tcl	Jul 1, 2026	Jul 1, 2026
Amazon_linux_2023	—	Upgrade rrdtool-docUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-develUpgrade rrdtool-perlUpgrade python3-rrdtoolUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-tclUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-debuginfoUpgrade rrdtool-luaUpgrade rrdtool-debugsourceUpgrade rrdtoolUpgrade rrdtool-perl-debuginfo	Jun 23, 2026	Jun 1, 2026
Oracle_linux	—	Upgrade rrdtool-tclUpgrade rrdtoolUpgrade rrdtool-luaUpgrade rrdtool-develUpgrade rrdtool-rubyUpgrade rrdtool-docUpgrade python3-rrdtoolUpgrade rrdtool-perl	Oct 22, 2026	Jun 1, 2026
Redhat_linux	—	Upgrade rrdtool-perlUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-rubyUpgrade rrdtool-docNo solution existsUpgrade rrdtool-luaUpgrade rrdtoolUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-debugsourceUpgrade rrdtool-debuginfoUpgrade rrdtool-develUpgrade rrdtool-lua-debuginfoUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-tclUpgrade python3-rrdtoolUpgrade rrdtool-ruby-debuginfo	Jul 2, 2026	Jun 1, 2026
Rocky_linux	—	Upgrade rrdtool-rubyUpgrade rrdtoolUpgrade rrdtool-docUpgrade rrdtool-perlUpgrade rrdtool-debugsourceUpgrade rrdtool-perl-debuginfoUpgrade python3-rrdtool-debuginfoUpgrade python3-rrdtoolUpgrade rrdtool-develUpgrade rrdtool-ruby-debuginfoUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-tclUpgrade rrdtool-luaUpgrade rrdtool-debuginfoUpgrade rrdtool-lua-debuginfo	Jul 6, 2026	Jul 4, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence