CVEvulnerability
CVE-2014-6262
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-134
Description
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function, aka ZEN-15415, a related issue to CVE-2013-2131.
Affected configurations
• zenoss zenoss core (< 4.2.5)
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://www.kb.cert.org/vuls/id/449452 Third Party Advisory, US Government Resource
- https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec Patch, Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/commit/85261a013112e278c90224033f5b0592ee387786 Patch, Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/pull/532 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00000.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00003.html Mailing List, Third Party Advisory
- https://www.securityfocus.com/bid/71540 Third Party Advisory, VDB Entry
- http://www.kb.cert.org/vuls/id/449452 Third Party Advisory, US Government Resource
- https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec Patch, Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/commit/85261a013112e278c90224033f5b0592ee387786 Patch, Third Party Advisory
- https://github.com/oetiker/rrdtool-1.x/pull/532 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00000.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00003.html Mailing List, Third Party Advisory
- https://www.securityfocus.com/bid/71540 Third Party Advisory, VDB Entry