CVE-2026-123776 | BDVDB-2026-401773 Detail

Description#

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process. The normalize_params method sends any query key matching /tz/i to tz(), which sets $ENV{TZ} to that value, with no validation. It then calls tzset(). glibc treats a TZ value starting with / or : as a file path and opens it, so a value naming a FIFO or a blocking device stalls the process inside tzset().

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-07Record published in the CVE List.
2. Version 22026-11-10Most recent update recorded in the CVE List.