A vulnerability in Netdata allows authenticated child agents to cause a denial of service by forcing the parent agent to abort via excessive memory allocation.

This is an uncontrolled resource consumption vulnerability (CWE-400) occurring within the pluginsd_rrdset_cache_put_to_slot function. An authenticated attacker can supply a malicious CHART SLOT value that triggers a massive memory allocation request, leading to a fatal process abort.

The successful exploitation of this vulnerability results in the disruption of centralized monitoring services, which can blind security and operations teams to system health and potential security events. While the CVSS score of 6.5 reflects a Medium severity due to the requirement for authenticated access, the ability to repeatedly disable monitoring infrastructure poses a significant operational risk to system availability and observability.

Immediate Action: Update the Netdata agent to version 2.10.4 or the 2.10.0-782-nightly build immediately to resolve the memory allocation flaw.

Proactive Monitoring: Monitor system logs for repeated process crashes or unusual memory spikes associated with the Netdata parent agent process.

Compensating Controls: Ensure that child agent communication is restricted to trusted, authenticated nodes and implement network-level rate limiting where applicable to reduce the impact of malicious traffic.

Public Exploit Available: No

Given the availability of a patch and the potential for repeated service disruption, organizations should prioritize updating all Netdata instances to version 2.10.4. This update effectively closes the resource consumption vector and restores system stability, preventing further risk of intentional monitoring outages.