High severity7.8NVD Advisory· Published Jun 1, 2026· Updated Jul 22, 2026
CVE-2026-43958
CVE-2026-43958
Description
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords10 versionspkg:rpm/almalinux/rrdtool-perlpkg:rpm/almalinux/rrdtool-tclpkg:rpm/almalinux/rrdtool-rubypkg:rpm/opensuse/rrdtool&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/python3-rrdtoolpkg:rpm/almalinux/rrdtoolpkg:rpm/almalinux/rrdtool-develpkg:rpm/almalinux/rrdtool-docpkg:rpm/almalinux/rrdtool-luapkg:rpm/opensuse/rrdtool&distro=openSUSE%20Leap%2016.0
< 1.8.0-21.el10_2+ 9 more
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.10.3-1.1
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.9.0-160000.4.1
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.