CVEs-PoC/2013/CVE-2013-2131.md

CVE-2013-2131

Description

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.

POC

Reference

• https://github.com/oetiker/rrdtool-1.x/pull/397
• https://github.com/oetiker/rrdtool-1.x/pull/397

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-