Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade rsyslog | Jul 30, 2024 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade rsyslogUpgrade rsyslog-mysqlUpgrade rsyslog-gssapiUpgrade rsyslog-gnutlsUpgrade rsyslog-pgsqlUpgrade rsyslog-relp | Oct 16, 2024 | Sep 6, 2011 |
| Suse | — | Upgrade rsyslog-module-mysqlUpgrade rsyslog-module-dbiUpgrade rsyslog-module-snmpUpgrade rsyslogUpgrade rsyslog-module-relpUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-gssapiUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-gtlsUpgrade rsyslog-docUpgrade rsyslog-module-udpspoof | Dec 12, 2013 | Sep 6, 2011 |
| Ubuntu | — | Upgrade rsyslog | Nov 8, 2024 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub