A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rrdtool-rubyUpgrade rrdtool-perlUpgrade rrdtoolUpgrade rrdtool-luaUpgrade python3-rrdtoolUpgrade rrdtool-docUpgrade rrdtool-tclUpgrade rrdtool-devel | Jul 1, 2026 | Jul 1, 2026 |
| Amazon_linux_2023 | — | Upgrade rrdtool-tcl-debuginfoUpgrade rrdtool-debuginfoUpgrade rrdtool-luaUpgrade rrdtool-debugsourceUpgrade rrdtool-tclUpgrade rrdtool-perl-debuginfoUpgrade rrdtoolUpgrade python3-rrdtool-debuginfoUpgrade python3-rrdtoolUpgrade rrdtool-perlUpgrade rrdtool-docUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-devel | Jun 23, 2026 | Jun 1, 2026 |
| Redhat_linux | — | Upgrade rrdtool-rubyUpgrade rrdtoolUpgrade rrdtool-luaUpgrade rrdtool-perlNo solution existsUpgrade rrdtool-docUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-debugsourceUpgrade rrdtool-tcl-debuginfoUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-ruby-debuginfoUpgrade rrdtool-develUpgrade rrdtool-lua-debuginfoUpgrade python3-rrdtoolUpgrade rrdtool-tclUpgrade rrdtool-debuginfo | Jul 2, 2026 | Jun 1, 2026 |
| Rocky_linux | — | Upgrade rrdtool-develUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-docUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-debugsourceUpgrade rrdtool-perlUpgrade rrdtoolUpgrade rrdtool-rubyUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-debuginfoUpgrade rrdtool-ruby-debuginfoUpgrade rrdtool-tclUpgrade rrdtool-luaUpgrade python3-rrdtool | Jul 6, 2026 | Jul 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub