Summary
[1.8.0-21]
- Fixed stack buffer overflow in rrdcached and added more security checks
Resolves: RHEL-173264
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-rrdtool | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-devel | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-doc | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-lua | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-perl | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-ruby | 0:1.8.0-21.el10_2 |
| Oracle Linux · 10 | rrdtool-tcl | 0:1.8.0-21.el10_2 |
Vulnerabilities 1
-
High 7.8
Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daem…