Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade rsyslog | Jul 30, 2024 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade rsyslog-gssapiUpgrade rsyslog-pgsqlUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-mysqlUpgrade rsyslog-relp | Oct 16, 2024 | Sep 6, 2011 |
| Suse | — | Upgrade rsyslogUpgrade rsyslog-module-relpUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-mysqlUpgrade rsyslog-module-snmpUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-udpspoofUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-mmnormalizeUpgrade rsyslog-docUpgrade rsyslog-diag-tools | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade rsyslog | Nov 8, 2024 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub