Summary
[1.7.0-17]
- Fixed stack buffer overflow in rrdcached and added more security checks
Resolves: RHEL-173259
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-rrdtool | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-devel | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-doc | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-lua | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-perl | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-ruby | 0:1.7.0-17.el8_10 |
| Oracle Linux · 8 | rrdtool-tcl | 0:1.7.0-17.el8_10 |
Vulnerabilities 1
-
High 7.8
Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daem…