CVE-2011-1489

CVE-2011-1489: fallo en rsyslog

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear rsyslog+ Monitorear rsyslog

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.5%
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Productos afectados
rsyslog · rsyslog
CVEs relacionadas — rsyslog

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-24903HIGHBuffer overflow in TCP syslog server (receiver) components in rsyslogEPSS 3.9%CVE-2026-55556HIGHRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingEPSS 0.9%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.6%CVE-2011-1488—CVE-2011-1488EPSS 0.5%CVE-2011-1490—CVE-2011-1490EPSS 0.4%CVE-2026-92709HIGHRsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCEEPSS 0.4%