A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade rsyslog | Jul 30, 2024 | Nov 14, 2019 |
| Suse | — | Upgrade rsyslog-module-dbiUpgrade rsyslog-module-udpspoofUpgrade rsyslogUpgrade rsyslog-module-mysqlUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-gssapiUpgrade rsyslog-docUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-relpUpgrade rsyslog-module-snmp | Feb 17, 2015 | Feb 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub