CLSA-2026-1780478536
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1780478536.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1780478536
- Upstream
- Published
- 2026-06-03T09:22:41Z
- Modified
- 2026-10-26T09:31:06Z
- Summary
- grafana: Fix of CVE-2026-33378
- Details
-
- CVE-2026-33378: fix denial of service (OOM) from a non-positive fill interval reaching the SQL fill/resample loop, which then stepped backwards in time and never terminated, allocating rows until the server ran out of memory. Reject interval <= 0 in the $__timeGroup / $__unixEpochGroup macros of the PostgreSQL, MySQL and MSSQL datasources, and additionally guard the shared resample call site (qm.Interval > 0) so a negative fillInterval supplied directly in the query JSON cannot reach the loop either
- References
Affected packages
TuxCare:AlmaLinux:9.6 / grafana
Package
- Name
- grafana
- Purl
- pkg:rpm/tuxcare/grafana?distro=almalinux-9.6