CVE-2011-1489

CVE-2011-1489: vulnerability in rsyslog

Published · Updated

Follow this CVE+ Monitor rsyslog+ Monitor rsyslog

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Affected products
rsyslog · rsyslog
Related CVEs — rsyslog

In the same product, most dangerous first.

CVE-2022-24903HIGHBuffer overflow in TCP syslog server (receiver) components in rsyslogEPSS 3.9%CVE-2026-55556HIGHRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingEPSS 0.9%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.6%CVE-2011-1488—CVE-2011-1488EPSS 0.5%CVE-2011-1490—CVE-2011-1490EPSS 0.4%CVE-2026-92709HIGHRsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCEEPSS 0.4%