CVE-2013-2131 Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdto...
MediumCVSS 5.0
EPSS 10.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/rrdtool(Ubuntu:22.04) | < 1.7.2-3ubuntu5 | 1.7.2-3ubuntu5 |
| debian/rrdtool(Debian:12) | < 1.4.8-1 | 1.4.8-1 |
| debian/rrdtool(Debian:13) | < 1.4.8-1 | 1.4.8-1 |
| debian/rrdtool(Debian:14) | < 1.4.8-1 | 1.4.8-1 |
| rrdtool project rrdtool | = 1.4.7 | No fix listed |
References
- Debian Security Tracker CVE-2013-2131 vendor-advisory
- bugs.debian.org issue-tracking
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- [oss-security] 20130418 plone, rrdtool, zenoss bugs mailing-list
- [oss-security] 20130419 Re: plone, rrdtool, zenoss bugs mailing-list
- [oss-security] 20130531 Re: plone, rrdtool, zenoss bugs mailing-list
- bugzilla.redhat.com
- github.com
- github.com