High severity7.8NVD Advisory· Published Jun 1, 2026· Updated Sep 28, 2026
CVE-2026-43958
CVE-2026-43958
Description
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords10 versionspkg:rpm/almalinux/python3-rrdtoolpkg:rpm/almalinux/rrdtoolpkg:rpm/almalinux/rrdtool-develpkg:rpm/almalinux/rrdtool-docpkg:rpm/almalinux/rrdtool-luapkg:rpm/almalinux/rrdtool-perlpkg:rpm/almalinux/rrdtool-rubypkg:rpm/almalinux/rrdtool-tclpkg:rpm/opensuse/rrdtool&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/rrdtool&distro=openSUSE%20Tumbleweed
< 1.8.0-21.el10_2+ 9 more
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.8.0-21.el10_2
- (no CPE)range: < 1.9.0-160000.4.1
- (no CPE)range: < 1.10.3-1.1
Patches
Vulnerability mechanics
References
9- access.redhat.com/errata/RHSA-2026:33731nvd
- access.redhat.com/errata/RHSA-2026:34155nvd
- access.redhat.com/errata/RHSA-2026:34156nvd
- access.redhat.com/errata/RHSA-2026:68702nvd
- access.redhat.com/errata/RHSA-2026:71600nvd
- access.redhat.com/errata/RHSA-2026:72277nvd
- access.redhat.com/errata/RHSA-2026:72278nvd
- access.redhat.com/security/cve/CVE-2026-43958nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.