Vulnerability · Published Jun 1, 2026 · Assigned by redhat
CVE-2026-43958Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
High 7.8
In plain English
A high-severity stack buffer overflow in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | python3-rrdtool | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | python3-rrdtool | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | python3-rrdtool | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-devel | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-devel | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-devel | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-doc | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-doc | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-doc | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-lua | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-lua | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-lua | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-perl | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-perl | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-perl | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-ruby | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-ruby | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-ruby | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| AlmaLinux:10 | rrdtool-tcl | 1.8.0-21.el10_2 | ALSA-2026:33731 |
| AlmaLinux:8 | rrdtool-tcl | 1.7.0-17.el8_10 | ALSA-2026:34155 |
| AlmaLinux:9 | rrdtool-tcl | 1.7.2-22.el9_8 | ALSA-2026:34156 |
| Debian:12 | rrdtool | no fix listed | DEBIAN-CVE-2026-43958 |
| Debian:13 | rrdtool | no fix listed | DEBIAN-CVE-2026-43958 |
| Debian:14 | rrdtool | no fix listed | DEBIAN-CVE-2026-43958 |
| Rocky Linux:10 | rrdtool | 0:1.8.0-21.el10_2 | RLSA-2026:33731 |
| Rocky Linux:8 | rrdtool | 0:1.7.0-17.el8_10 | RLSA-2026:34155 |
| Rocky Linux:9 | rrdtool | 0:1.7.2-22.el9_8 | RLSA-2026:34156 |
| Ubuntu:22.04:LTS | rrdtool | no fix listed | UBUNTU-CVE-2026-43958 |
| Ubuntu:24.04:LTS | rrdtool | no fix listed | UBUNTU-CVE-2026-43958 |
| Ubuntu:25.10 | rrdtool | no fix listed | UBUNTU-CVE-2026-43958 |
| Ubuntu:26.04:LTS | rrdtool | no fix listed | UBUNTU-CVE-2026-43958 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | see references |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | see references |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHSA-2026:33731 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:34155 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:34156 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:68702 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:71600 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:72277 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:72278 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-43958 vdb-entry, x_refsource_REDHAT
- RHBZ#2460932 issue-tracking, x_refsource_REDHAT