Summary
[1.7.2-22]
- Fixed stack buffer overflow in rrdcached and added more security checks
Resolves: RHEL-173257
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3-rrdtool | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-devel | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-doc | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-lua | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-perl | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-ruby | 0:1.7.2-22.el9_8 |
| Oracle Linux · 9 | rrdtool-tcl | 0:1.7.2-22.el9_8 |
Vulnerabilities 1
-
High 7.8
Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daem…