CVE-2011-1489

CVE-2011-1489: falha em rsyslog

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar rsyslog+ Monitorar rsyslog

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Produtos afetados
rsyslog · rsyslog
CVEs relacionadas — rsyslog

No mesmo produto, das mais perigosas para as menos.

CVE-2022-24903HIGHBuffer overflow in TCP syslog server (receiver) components in rsyslogEPSS 3.9%CVE-2026-55556HIGHRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingEPSS 0.9%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.6%CVE-2011-1488—CVE-2011-1488EPSS 0.5%CVE-2011-1490—CVE-2011-1490EPSS 0.4%CVE-2026-92709HIGHRsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCEEPSS 0.4%