CVE-2026-43958 Details

A stack-based buffer overflow vulnerability has been identified in rrdcached, a component of rrdtool, versions through 1.8.0-20.el10. This vulnerability allows local attackers with access to a rrdcached socket to exploit the issue by sending oversized CREATE requests. The flaw can cause a denial-of-service by crashing the daemon or potentially lead to arbitrary code execution, thereby affecting the integrity and confidentiality of data.

Restrict access to the rrdcached UNIX socket using filesystem permissions and group ownership to prevent untrusted local users from connecting. Avoid exposing rrdcached on TCP listeners unless strictly necessary, and ensure any such listeners are protected by network access controls. Run the rrdcached daemon as an unprivileged user and group to minimize impact in case of compromise.