An authenticated child agent can trigger a heap-based buffer overflow in Netdata versions prior to 2.10.4, leading to a denial of service of the parent agent process.

The vulnerability exists due to an integer overflow during size calculation in prd_array_create, triggered by an oversized DIMENSION SLOT value sent by an authenticated child agent. This results in an out-of-bounds write that corrupts the heap and crashes the parent agent process.

The primary risk associated with this vulnerability is a denial of service for the Netdata observability platform. Because Netdata is critical for monitoring system health and performance, an unexpected crash of the parent agent could lead to significant gaps in visibility, hindering incident response and operational oversight. With a CVSS score of 6.5, this is a medium-severity issue that directly impacts system availability.

Immediate Action: Update Netdata to version 2.10.4 or later to apply the necessary bounds checking and prevent the integer overflow.

Proactive Monitoring: Monitor system logs for unexpected terminations of the Netdata parent process and investigate any anomalous DIMENSION SLOT values in agent communication.

Compensating Controls: Ensure that communication between child and parent agents is restricted to trusted, internal network segments to limit the potential for unauthorized authenticated access.

Public Exploit Available: No (exploit_available: unknown)

Organizations utilizing Netdata in distributed environments should prioritize the update to version 2.10.4. Although this vulnerability requires an authenticated session, the potential for service disruption warrants prompt remediation to ensure the continuity of monitoring infrastructure.