p PatchFirst

CVE-2011-1489

CVE-2011-1489

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

CVSS 5.5 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rsyslog

    Versions
    • before 5.7.6: Affected

    No fix published

  • rsyslog Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

Original sources

Check your server →