CVE-2011-1488: falha em rsyslog
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
Produtos afetados
rsyslog · rsyslogCVEs relacionadas — rsyslog
No mesmo produto, das mais perigosas para as menos.
CVE-2022-24903HIGHBuffer overflow in TCP syslog server (receiver) components in rsyslogEPSS 3.9%CVE-2026-55556HIGHRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingEPSS 0.9%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.6%CVE-2011-1489—CVE-2011-1489EPSS 0.5%CVE-2011-1490—CVE-2011-1490EPSS 0.4%CVE-2026-92709HIGHRsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCEEPSS 0.4%
Referências
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlhttps://access.redhat.com/security/cve/cve-2011-1488https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2ahttps://security-tracker.debian.org/tracker/CVE-2011-1488