p PatchFirst

CVE-2011-1490

CVE-2011-1490

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

CVSS 5.5 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rsyslog

    Versions
    • before 5.7.6: Affected

    No fix published

  • rsyslog Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

  • rsyslog Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.7.6-1

    Update to 5.7.6-1

Original sources

Check your server →