Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3468-1

Опубликовано: 03 авг. 2026
Источник: suse-cvrf

Описание

Security update for rrdtool

This update for rrdtool fixes the following issue:

  • CVE-2026-43958: stack buffer overflow in rrdcached handle_request_create() can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
librrd8-1.8.0-150600.3.9.1
perl-rrdtool-1.8.0-150600.3.9.1
rrdtool-1.8.0-150600.3.9.1
rrdtool-devel-1.8.0-150600.3.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS
librrd8-1.8.0-150600.3.9.1
perl-rrdtool-1.8.0-150600.3.9.1
rrdtool-1.8.0-150600.3.9.1
rrdtool-devel-1.8.0-150600.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
librrd8-1.8.0-150600.3.9.1
perl-rrdtool-1.8.0-150600.3.9.1
rrdtool-1.8.0-150600.3.9.1
rrdtool-devel-1.8.0-150600.3.9.1

Ссылки

Описание

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:librrd8-1.8.0-150600.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:perl-rrdtool-1.8.0-150600.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:rrdtool-1.8.0-150600.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:rrdtool-devel-1.8.0-150600.3.9.1
Ссылки
Уязвимость SUSE-SU-2026:3468-1