EUVD-2026-33726
GHSA-pgh2-hfvj-4q69
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.
AnalysisAI
Stack-based buffer overflow in rrdcached (the caching daemon for rrdtool) allows a local attacker with socket access to crash the daemon or potentially execute arbitrary code by sending an oversized CREATE request. The flaw is tracked under CWE-121 with a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:L), reported by Red Hat against RHEL 6 through 10, and there is no public exploit identified at time of analysis.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running rrdcached (focus on RHEL 6, 7, 8, 9, 10), document current socket file permissions and local user accounts with access, and review audit logs for suspicious local access attempts. Within 7 days: Implement file-level access controls (restrict socket to authorized users only), enforce SELinux policies limiting rrdcached privileges, enable monitoring of rrdcached process behavior and logs, and restrict local system access to trusted administrators. …
Sign in for detailed remediation steps.
More from same product – last 7 days
Remote code execution in Hugging Face Transformers 5.2.0 allows a malicious model repository to bypass the user's explic
HAProxy configuration injection in Red Hat OpenShift Container Platform 4 allows a low-privileged tenant with permission
Path traversal in Jupyter Server 2.17.0 allows authenticated users to read and write files in sibling directories outsid
Heap out-of-bounds read in Sereal::Decoder for Perl before version 5.005 allows remote attackers to leak up to 31 bytes
Local code execution in Poppler's Splash rendering backend allows attackers to compromise applications that open attacke
Vendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today