# CVE-2026-43958: Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

CVE-2026-43958 is fixed in 14 products on 1 platform, first by RHSA-2026:68702, released June 1, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-43958
- Priority: High
- CVSS: 7.8 (Important)
- EPSS: 0.0018
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 1, 2026
- Weakness: Stack-based Buffer Overflow
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43958

## Description

The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density.  Security Fix(es):  * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | python3-rrdtool RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | python3-rrdtool RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | python3-rrdtool almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | python3-rrdtool almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | python3-rrdtool almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | python3-rrdtool amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | python3-rrdtool ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | python3-rrdtool ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | python3-rrdtool ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | python3-rrdtool-debuginfo amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool RHEL 10 | 1.8.0-20.el10_0.1 | [RHSA-2026:68702](https://patchblox.com/security/data/fix/linux/rhsa-2026-68702.md) | Jun 1, 2026 |
| Linux | rrdtool RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool opensuse-leap 16.0 | 1.9.0-160000.4.1 | [OPENSUSE-SU-2026:21525-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21525-1.md) | Aug 4, 2026 |
| Linux | rrdtool rocky 10 | 0:1.8.0-21.el10_2 | [RLSA-2026:33731](https://patchblox.com/security/data/fix/linux/rlsa-2026-33731.md) | Jul 7, 2026 |
| Linux | rrdtool rocky 8 | 0:1.7.0-17.el8_10 | [RLSA-2026:34155](https://patchblox.com/security/data/fix/linux/rlsa-2026-34155.md) | Jul 4, 2026 |
| Linux | rrdtool rocky 9 | 0:1.7.2-22.el9_8 | [RLSA-2026:34156](https://patchblox.com/security/data/fix/linux/rlsa-2026-34156.md) | Jul 5, 2026 |
| Linux | rrdtool sles 15.6 | 1.8.0-150600.3.9.1 | [SUSE-SU-2026:3468-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3468-1.md) | Aug 3, 2026 |
| Linux | rrdtool sles 15.7 | 1.8.0-150600.3.9.1 | [SUSE-SU-2026:3468-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3468-1.md) | Aug 3, 2026 |
| Linux | rrdtool sles 16.0 | 1.9.0-160000.4.1 | [SUSE-SU-2026:23141-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23141-1.md) | Aug 4, 2026 |
| Linux | rrdtool-debuginfo amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-debugsource amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-devel RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-devel RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-devel almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-devel almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-devel almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-devel amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-devel ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-devel ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-devel ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-doc RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-doc RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-doc almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-doc almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-doc almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-doc amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-doc ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-doc ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-doc ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-lua RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-lua RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-lua almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-lua almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-lua almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-lua amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-lua ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-lua ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-lua ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-lua-debuginfo amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-perl RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-perl RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-perl almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-perl almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-perl almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-perl amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-perl ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-perl ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-perl ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-perl-debuginfo amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-ruby RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-ruby RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-ruby almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-ruby almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-ruby almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-ruby ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-ruby ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-ruby ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl RHEL 8 | 0:1.7.0-17.el8_10 | [RHSA-2026:34155](https://patchblox.com/security/data/fix/linux/rhsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl RHEL 9 | 0:1.7.2-22.el9_8 | [RHSA-2026:34156](https://patchblox.com/security/data/fix/linux/rhsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl almalinux 10 | 1.8.0-21.el10_2 | [ALSA-2026:33731](https://patchblox.com/security/data/fix/linux/alsa-2026-33731.md) | Jun 30, 2026 |
| Linux | rrdtool-tcl almalinux 8 | 1.7.0-17.el8_10 | [ALSA-2026:34155](https://patchblox.com/security/data/fix/linux/alsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl almalinux 9 | 1.7.2-22.el9_8 | [ALSA-2026:34156](https://patchblox.com/security/data/fix/linux/alsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |
| Linux | rrdtool-tcl ol 10 | 0:1.8.0-21.el10_2 | [ELSA-2026-33731](https://patchblox.com/security/data/fix/linux/elsa-2026-33731.md) | Jul 16, 2026 |
| Linux | rrdtool-tcl ol 8 | 0:1.7.0-17.el8_10 | [ELSA-2026-34155](https://patchblox.com/security/data/fix/linux/elsa-2026-34155.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl ol 9 | 0:1.7.2-22.el9_8 | [ELSA-2026-34156](https://patchblox.com/security/data/fix/linux/elsa-2026-34156.md) | Jul 1, 2026 |
| Linux | rrdtool-tcl-debuginfo amzn 2023 | 1.7.2-16.amzn2023.0.4 | [ALAS2023-2026-1823](https://patchblox.com/security/data/fix/linux/alas2023-2026-1823.md) | Jun 8, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.