Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade rsyslog | Jul 30, 2024 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslogUpgrade rsyslog-mysqlUpgrade rsyslog-pgsqlUpgrade rsyslog-relp | Oct 16, 2024 | Sep 6, 2011 |
| Suse | — | Upgrade rsyslog-module-gssapiUpgrade rsyslog-module-mmnormalizeUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-udpspoofUpgrade rsyslog-docUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-mysqlUpgrade rsyslog-module-snmpUpgrade rsyslogUpgrade rsyslog-module-relp | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade rsyslog | Nov 8, 2024 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub