A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rrdtool-develUpgrade python3-rrdtoolUpgrade rrdtool-tclUpgrade rrdtool-docUpgrade rrdtool-luaUpgrade rrdtool-rubyUpgrade rrdtoolUpgrade rrdtool-perl | Jul 1, 2026 | Jul 1, 2026 |
| Amazon_linux_2023 | — | Upgrade rrdtool-develUpgrade rrdtool-perlUpgrade python3-rrdtoolUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-docUpgrade rrdtoolUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-tclUpgrade rrdtool-debugsourceUpgrade rrdtool-luaUpgrade rrdtool-debuginfoUpgrade rrdtool-tcl-debuginfo | Jun 23, 2026 | Jun 1, 2026 |
| Redhat_linux | — | Upgrade rrdtool-tclUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-ruby-debuginfoUpgrade rrdtool-develUpgrade rrdtool-debuginfoUpgrade python3-rrdtoolUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-luaUpgrade rrdtool-debugsourceUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-docUpgrade rrdtool-rubyUpgrade rrdtoolNo solution existsUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-perl | Jul 2, 2026 | Jun 1, 2026 |
| Rocky_linux | — | Upgrade rrdtool-luaUpgrade rrdtool-debuginfoUpgrade rrdtool-tcl-debuginfoUpgrade rrdtool-tclUpgrade rrdtool-lua-debuginfoUpgrade rrdtool-ruby-debuginfoUpgrade rrdtool-develUpgrade python3-rrdtoolUpgrade rrdtool-debugsourceUpgrade rrdtool-perl-debuginfoUpgrade rrdtool-perlUpgrade rrdtoolUpgrade python3-rrdtool-debuginfoUpgrade rrdtool-rubyUpgrade rrdtool-doc | Jul 6, 2026 | Jul 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub