Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rsyslog rsyslog - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2011-4623
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x prior to 4.6.6, 5.x prior to 5.7.4, and 6.x prior to 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffe...
Rsyslog Rsyslog 4.5.6Rsyslog Rsyslog 4.1.2Rsyslog Rsyslog 4.5.1Rsyslog Rsyslog 4.6.3Rsyslog Rsyslog 4.5.2Rsyslog Rsyslog 4.1.1Rsyslog Rsyslog 4.4.2Rsyslog Rsyslog 4.6.4Rsyslog Rsyslog 4.5.4Rsyslog Rsyslog 4.3.2Rsyslog Rsyslog 4.1.3Rsyslog Rsyslog 4.5.3Rsyslog Rsyslog 4.6.1Rsyslog Rsyslog 4.1.0Rsyslog Rsyslog 4.5.8Rsyslog Rsyslog 4.1.5Rsyslog Rsyslog 4.3.0Rsyslog Rsyslog 4.6.2Rsyslog Rsyslog 4.5.5Rsyslog Rsyslog 4.4.0Rsyslog Rsyslog 4.6.0Rsyslog Rsyslog 4.5.0
6.8
CVSSv2
CVE-2013-4758
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog prior to 7.4.2 and prior to 7.5.2 devel, when errorfile is set to local logging, allows remote malicious users to cause a denial of service (crash) and possibly execu...
Rsyslog Rsyslog 7.3.7Rsyslog Rsyslog 7.3.6Rsyslog Rsyslog 7.3.5Rsyslog Rsyslog 7.3.4Rsyslog Rsyslog 7.1.10Rsyslog Rsyslog 7.1.9Rsyslog Rsyslog 7.1.8Rsyslog Rsyslog 7.1.7Rsyslog Rsyslog 7.1.6Rsyslog Rsyslog 7.4.0Rsyslog Rsyslog 7.3.15Rsyslog Rsyslog 7.3.14Rsyslog Rsyslog 7.3.13Rsyslog Rsyslog 7.2.6Rsyslog Rsyslog 7.2.5Rsyslog Rsyslog 7.2.4Rsyslog Rsyslog 7.2.3Rsyslog Rsyslog 7.1.1Rsyslog Rsyslog 7.1.0Rsyslog Rsyslog 6.6.0Rsyslog Rsyslog 6.5.1Rsyslog Rsyslog
5
CVSSv2
CVE-2011-3200
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x prior to 4.6.8 and 5.2.0 up to and including 5.8.4 might allow remote malicious users to cause a denial of service (application exit) via a long TAG in a legacy syslog...
Rsyslog Rsyslog 4.6.6Rsyslog Rsyslog 4.6.7Rsyslog Rsyslog 4.6.3Rsyslog Rsyslog 4.6.4Rsyslog Rsyslog 4.6.1Rsyslog Rsyslog 4.6.2Rsyslog Rsyslog 4.6.0Rsyslog Rsyslog 4.6.5Rsyslog Rsyslog 5.5.6Rsyslog Rsyslog 5.5.7Rsyslog Rsyslog 5.4.2Rsyslog Rsyslog 5.5.0Rsyslog Rsyslog 5.5.4Rsyslog Rsyslog 5.5.1Rsyslog Rsyslog 5.6.1Rsyslog Rsyslog 5.3.6Rsyslog Rsyslog 5.8.3Rsyslog Rsyslog 5.6.4Rsyslog Rsyslog 5.7.5Rsyslog Rsyslog 5.5.3Rsyslog Rsyslog 5.8.0Rsyslog Rsyslog 5.8.2
8.5
CVSSv2
CVE-2008-5617
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote malicious users to bypass intended access restrictions and spoof log messages or create a large number of spurious messages.
Rsyslog Rsyslog 4.1.1Rsyslog Rsyslog 3.19.9Rsyslog Rsyslog 3.17.5Rsyslog Rsyslog 3.19.3Rsyslog Rsyslog 3.19.2Rsyslog Rsyslog 3.12.5Rsyslog Rsyslog 3.12.4Rsyslog Rsyslog 4.1.0Rsyslog Rsyslog 3.20.0Rsyslog Rsyslog 3.17.4Rsyslog Rsyslog 3.19.8Rsyslog Rsyslog 3.19.1Rsyslog Rsyslog 3.19.0Rsyslog Rsyslog 3.12.3Rsyslog Rsyslog 3.12.2Rsyslog Rsyslog 3.12.1Rsyslog Rsyslog 3.19.12Rsyslog Rsyslog 3.19.7Rsyslog Rsyslog 3.19.6Rsyslog Rsyslog 3.17.1Rsyslog Rsyslog 3.15.1Rsyslog Rsyslog 3.17.0
5
CVSSv2
CVE-2014-3683
Integer overflow in rsyslog prior to 7.6.7 and 8.x prior to 8.4.2 and sysklogd 1.5 and previous versions allows remote malicious users to cause a denial of service (crash) via a large priority (PRI) value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-...
Rsyslog Rsyslog 8.1.5Rsyslog Rsyslog 8.1.6Rsyslog Rsyslog 8.3.2Rsyslog Rsyslog 8.3.3Rsyslog RsyslogRsyslog Rsyslog 8.1.0Rsyslog Rsyslog 8.2.0Rsyslog Rsyslog 8.2.1Rsyslog Rsyslog 8.3.4Rsyslog Rsyslog 8.3.5Rsyslog Rsyslog 8.1.1Rsyslog Rsyslog 8.1.2Rsyslog Rsyslog 8.2.2Rsyslog Rsyslog 8.2.3Rsyslog Rsyslog 8.4.0Rsyslog Rsyslog 8.4.1Rsyslog Rsyslog 8.1.3Rsyslog Rsyslog 8.1.4Rsyslog Rsyslog 8.3.0Rsyslog Rsyslog 8.3.1Sysklogd Project Sysklogd 1.4Sysklogd Project Sysklogd 1.4.1
5
CVSSv2
CVE-2008-5618
imudp in rsyslog 4.x prior to 4.1.2, 3.21 prior to 3.21.9 beta, and 3.20 prior to 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote malicious users to cause a denial of service (disk consumption) via a large number of spurious messages...
Rsyslog Rsyslog 4.1.0Rsyslog Rsyslog 3.12.1Rsyslog Rsyslog 4.1.1Rsyslog Rsyslog 3.20.0
7.5
CVSSv2
CVE-2005-3074
SQL injection vulnerability in rsyslogd in RSyslog prior to 1.0.1 and prior to 1.10.1 allows remote malicious users to execute arbitrary SQL commands via crafted syslog messages.
Rsyslog Rsyslogd 0.9.3 StableRsyslog Rsyslogd 0.9.4 StableRsyslog Rsyslogd 0.9.5 StableRsyslog Rsyslogd 0.9.6 StableRsyslog Rsyslogd 0.8.0 StableRsyslog Rsyslogd 0.8.1 StableRsyslog Rsyslogd 0.9.0 StableRsyslog Rsyslogd 0.9.2 StableRsyslog Rsyslogd 0.9.7 StableRsyslog Rsyslogd 1.0.0 StableRsyslog RsyslogdRsyslog Rsyslogd 0.8.2 StableRsyslog Rsyslogd 0.8.3 StableRsyslog Rsyslogd 0.8.4 StableRsyslog Rsyslogd 0.9.1 StableRsyslog Rsyslogd 0.9.8 Stable
2.1
CVSSv2
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
Rsyslog Rsyslog -
7.5
CVSSv2
CVE-2017-12588
The zmq3 input and output modules in rsyslog prior to 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.
Rsyslog Rsyslog
7.5
CVSSv2
CVE-2019-17040
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
Rsyslog Rsyslog 8.1908.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook