Lucene search

K
archlinuxArch LinuxASA-201410-1
HistoryOct 01, 2014 - 12:00 a.m.

rsyslog: remote denial of service

2014-10-0100:00:00
Arch Linux
lists.archlinux.org
20

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.227 Low

EPSS

Percentile

96.0%

Sending a syslog message containing an invalid PRI value to a
vulnerable rsyslog server accepting remote message will trigger a denial
of service by crashing the rsyslog process.

OSVersionArchitecturePackageVersionFilename
anyanyanyrsyslog< 8.4.1-1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.227 Low

EPSS

Percentile

96.0%