p PatchFirst

CVE-2011-1488

CVE-2011-1488

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.

CVSS 5.5 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rsyslog

    Versions
    • before 5.7.6: Affected

    No fix published

  • rsyslog Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

Original sources

Check your server →