A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0186 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-43958:
    A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket     can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can     lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution,     impacting the integrity and confidentiality of data.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33731 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1189:01 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:34156 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:34155 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34155 advisory.

    [1.7.0-17]
    - Fixed stack buffer overflow in rrdcached and added more security checks       Resolves: RHEL-173259

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34156 advisory.

    [1.7.2-22]
    - Fixed stack buffer overflow in rrdcached and added more security checks       Resolves: RHEL-173257

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33731 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:34156 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:34155 advisory.

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:34155 advisory.

    The round robin database (RRD) system stores and displays time-series data, such as network bandwidth,     machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing     utility, which can be easily integrated with shell scripts, or used to create applications using its Perl,     Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over     time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data     density.

    Security Fix(es):

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:34156 advisory.

    The round robin database (RRD) system stores and displays time-series data, such as network bandwidth,     machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing     utility, which can be easily integrated with shell scripts, or used to create applications using its Perl,     Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over     time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data     density.

    Security Fix(es):

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:33731 advisory.

    The round robin database (RRD) system stores and displays time-series data, such as network bandwidth,     machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing     utility, which can be easily integrated with shell scripts, or used to create applications using its Perl,     Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over     time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data     density.

    Security Fix(es):

    * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation     via unbounded DS/RRA arguments (CVE-2026-43958)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1823 advisory.

    A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket     can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can     lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution,     impacting the integrity and confidentiality of data. (CVE-2026-43958)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket     can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can     lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution,     impacting the integrity and confidentiality of data. (CVE-2026-43958)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
325915	Alibaba Cloud Linux 3 : 0186: rrdtool (ALINUX3-SA-2026:0186)	Nessus	Alibaba Cloud Linux Local Security Checks	high
325390	RockyLinux 10 : rrdtool (RLSA-2026:33731)	Nessus	Rocky Linux Local Security Checks	high
325170	MiracleLinux 8 : rrdtool-1.7.0-17.el8_10 (AXSA:2026-1189:01)	Nessus	Miracle Linux Local Security Checks	high
325151	RockyLinux 9 : rrdtool (RLSA-2026:34156)	Nessus	Rocky Linux Local Security Checks	high
325075	RockyLinux 8 : rrdtool (RLSA-2026:34155)	Nessus	Rocky Linux Local Security Checks	high
324881	Oracle Linux 8 : rrdtool (ELSA-2026-34155)	Nessus	Oracle Linux Local Security Checks	high
324724	Oracle Linux 9 : rrdtool (ELSA-2026-34156)	Nessus	Oracle Linux Local Security Checks	high
324588	AlmaLinux 10 : rrdtool (ALSA-2026:33731)	Nessus	Alma Linux Local Security Checks	high
324586	AlmaLinux 9 : rrdtool (ALSA-2026:34156)	Nessus	Alma Linux Local Security Checks	high
324577	AlmaLinux 8 : rrdtool (ALSA-2026:34155)	Nessus	Alma Linux Local Security Checks	high
324573	RHEL 8 : rrdtool (RHSA-2026:34155)	Nessus	Red Hat Local Security Checks	high
324564	RHEL 9 : rrdtool (RHSA-2026:34156)	Nessus	Red Hat Local Security Checks	high
324076	RHEL 10 : rrdtool (RHSA-2026:33731)	Nessus	Red Hat Local Security Checks	high
321995	Amazon Linux 2023 : python3-rrdtool, rrdtool, rrdtool-devel (ALAS2023-2026-1823)	Nessus	Amazon Linux Local Security Checks	high
318212	Linux Distros Unpatched Vulnerability : CVE-2026-43958	Nessus	Misc.	high

Detections

Analytics

CVE-2026-43958

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high