Product
RRD::CGI::Image versions through 0.01 pass unsanitized CGI query parameters to the tzset() function, allowing an attacker to trigger a process hang via a FIFO or device path.