high7.8
CVE-2026-43958
A flaw was found in rrdcached, a component of rrdtool.
Impact
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2026:33731
- https://access.redhat.com/errata/RHSA-2026:34155
- https://access.redhat.com/errata/RHSA-2026:34156
- https://access.redhat.com/errata/RHSA-2026:68702
- https://access.redhat.com/errata/RHSA-2026:71600
- https://access.redhat.com/errata/RHSA-2026:72277
- https://access.redhat.com/errata/RHSA-2026:72278
- https://access.redhat.com/security/cve/CVE-2026-43958
- https://bugzilla.redhat.com/show_bug.cgi?id=2460932