CVE-2013-2131
NoneCVSS
—
EPSS
10.6%
Published
Jan 4, 2015
CISA due date
—
The record
Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | rrdtool | 0 | 1.4.8-1 |
| Debian:11 | rrdtool | 0 | 1.4.8-1 |
| Debian:12 | rrdtool | 0 | 1.4.8-1 |
| Debian:13 | rrdtool | 0 | 1.4.8-1 |
| Debian:14 | rrdtool | 0 | 1.4.8-1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Server 12 SP1 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Server 12 SP2 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | rrdtool | 0 | 1.4.7-20.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | rrdtool | 0 | 1.4.7-20.1 |
| Ubuntu:14.04:LTS | rrdtool | 0 | No fix |
| Ubuntu:18.04:LTS | rrdtool | 0 | 1.7.0-1build1 |
| Ubuntu:20.04:LTS | rrdtool | 0 | 1.7.2-3build1 |
| Ubuntu:22.04:LTS | rrdtool | 0 | 1.7.2-3ubuntu5 |
| Ubuntu:Pro:14.04:LTS | rrdtool | 0 | No fix |
Related vulnerabilities
- CVE-2026-73782 A format string vulnerability exists in the command line interface of AOS-CX that could… CWE-134
- CVE-2026-16821 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain… CWE-134
- CVE-2026-81574 In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input… CWE-134
- CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender… CWE-134
- CVE-2026-17136 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute… CWE-134
- CVE-2026-68553 Coturn is a free open source implementation of TURN and STUN Server. CWE-134
- CVE-2026-15961 IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through… CWE-134
- CVE-2026-12004 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0… CWE-134