p PatchFirst

CVE-2017-12588

CVE-2017-12588

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.

CVSS 9.8 · Critical · EPSS 2.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • rsyslog Debian:12

    Affected ranges
    • ECOSYSTEM: < 8.28.0-1

    Update to 8.28.0-1

  • rsyslog Debian:13

    Affected ranges
    • ECOSYSTEM: < 8.28.0-1

    Update to 8.28.0-1

  • rsyslog Debian:14

    Affected ranges
    • ECOSYSTEM: < 8.28.0-1

    Update to 8.28.0-1

Original sources

Check your server →