Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3449-1

Опубликовано: 03 авг. 2026
Источник: suse-cvrf

Описание

Security update for rrdtool

This update for rrdtool fixes the following issue

  • CVE-2026-43958: stack buffer overflow in rrdcached handle_request_create() can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
librrd8-1.7.0-150000.6.6.1
perl-rrdtool-1.7.0-150000.6.6.1
rrdtool-1.7.0-150000.6.6.1
rrdtool-devel-1.7.0-150000.6.6.1

Ссылки

Описание

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:librrd8-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:perl-rrdtool-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:rrdtool-1.7.0-150000.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:rrdtool-devel-1.7.0-150000.6.6.1
Ссылки