Description (CNA)
Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2013/04/18/5
- https://bugzilla.redhat.com/show_bug.cgi?id=969296
- https://github.com/oetiker/rrdtool-1.x/pull/397
- http://www.openwall.com/lists/oss-security/2013/05/19/5
- https://github.com/oetiker/rrdtool-1.x/issues/396
- http://www.openwall.com/lists/oss-security/2013/05/31/2
ADP enrichment
No English description supplied.
- http://www.openwall.com/lists/oss-security/2013/04/18/5
- https://bugzilla.redhat.com/show_bug.cgi?id=969296
- https://github.com/oetiker/rrdtool-1.x/pull/397
- http://www.openwall.com/lists/oss-security/2013/05/19/5
- https://github.com/oetiker/rrdtool-1.x/issues/396
- http://www.openwall.com/lists/oss-security/2013/05/31/2