A stack-based buffer overflow was discovered in the rrdcached component of rrdtool, where receiving an oversized CREATE request can overwrite the stack. The flaw allows a local attacker with access to a rrdcached socket to trigger a denial of service by crashing the daemon or to execute arbitrary code. The potential code execution would compromise the integrity and confidentiality of data managed by rrdcached.

The vulnerability affects Red Hat Enterprise Linux releases 6 through 10. Systems running any of these distributions with the affected rrdtool component are at risk. The specific versions impacted are not enumerated in the available data, so all installations of the vulnerable rrdcached services should be treated as potentially exposed.

The published CVSS score of 7.8 indicates high severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no current known exploitation but not ruling out future risk. The attack vector is local; an adversary must already have the ability to communicate with rrdcached via its socket or an exposed TCP listener. Effective exploitation requires sending a malicious CREATE request. Because the flaw leads to a buffer overflow, it is considered high risk for local privilege escalation and denial of service.