Tobias Oetiker · Rrdtool · CVE-2013-2131
**Name of the Vulnerable Software and Affected Versions**
rrdtool version 1.4.7
**Description**
The issue is related to a format string vulnerability in the rrdtool module for Python, which is used in Zenoss. This vulnerability allows context-dependent attackers to cause a denial of service, resulting in a crash, by using format string specifiers in the `rrdtool.graph` function.
**Recommendations**
For rrdtool version 1.4.7, consider restricting access to the `rrdtool.graph` function until a patch is available to prevent potential denial of service attacks. As a temporary workaround, avoid using format string specifiers in the `rrdtool.graph` function to minimize the risk of exploitation.