Lucene search
Gentoo FoundationGLSA-201412-35HistoryDec 24, 2014 - 12:00 a.m.
RSYSLOG: Denial of service
2014-12-2400:00:00
Gentoo Foundation
security.gentoo.org
12
0.228 Low
EPSS
Percentile
96.5%
Background
RSYSLOG is an enhanced multi-threaded syslogd with database support and more.
Description
Multiple vulnerabilities have been discovered in RSYSLOG. Please review the CVE identifiers referenced below for details.
Impact
A context-dependent attacker may be able to create a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All RSYSLOG users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/rsyslog-8.4.2"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-admin/rsyslog | <Â 8.4.2 | UNKNOWN |
Related
nessus
nessus
GLSA-201412-35 : RSYSLOG: Denial of Service
2014-12-26 00:00:00
Debian DSA-3047-1 : rsyslog - security update
2014-10-09 00:00:00
AIX rsyslog Advisory : rsyslog_advisory.asc
2014-12-02 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-35
2015-09-29 00:00:00
Debian: Security Advisory (DSA-3047-1)
2014-10-07 00:00:00
Debian Security Advisory DSA 3047-1 (rsyslog - security update)
2014-10-08 00:00:00
aix
aix
Open Source RSyslog vulnerability
2014-11-14 15:31:13
suse
suse
Security update for rsyslog (important)
2014-10-15 00:04:46
securityvulns
securityvulns
rsyslog DoS
2014-10-05 00:00:00
[SECURITY] [DSA 3040-1] rsyslog security update
2014-10-05 00:00:00
debiancve
debiancve
ibm
ibm
cve
cve
osv
osv
rsyslog - regression update
2014-10-19 00:00:00
rsyslog - security update
2014-10-19 00:00:00
rsyslog - security update
2014-10-08 00:00:00
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 72-1] rsylog security update
2014-10-19 17:00:31
[SECURITY] [DSA 3047-1] rsyslog security update
2014-10-08 11:12:07
[SECURITY] [DSA 3040-1] rsyslog security update
2014-09-30 21:14:26
prion
prion
Integer overflow
2014-11-02 00:55:00
Integer overflow
2012-09-25 23:55:00
Out-of-bounds
2014-11-02 00:55:00
altlinux
altlinux
Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1
2014-10-13 00:00:00
ubuntu
ubuntu
Rsyslog vulnerabilities
2014-10-09 00:00:00
Rsyslog vulnerability
2012-01-23 00:00:00
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
RSYSLOG PRI Value Parsing Integer Overflow Denial of Service (CVE-2014-3683)
2014-12-02 00:00:00
archlinux
archlinux
rsyslog: remote denial of service
2014-10-08 00:00:00
rsyslog: remote denial of service
2014-10-01 00:00:00
oraclelinux
oraclelinux
rsyslog security, bug fix, and enhancement update
2012-06-27 00:00:00
rsyslog security update
2014-10-13 00:00:00
rsyslog5 and rsyslog security update
2014-10-20 00:00:00
redhat
redhat
(RHSA-2012:0796) Moderate: rsyslog security, bug fix, and enhancement update
2012-06-20 00:00:00
(RHSA-2014:1397) Important: rsyslog security update
2014-10-13 00:00:00
(RHSA-2014:1654) Important: rsyslog7 security update
2014-10-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:20
Remote Code Execution (RCE)
2019-01-15 09:02:37
amazon
amazon
Medium: rsyslog
2012-07-06 16:04:00
Medium: rsyslog
2014-11-11 10:26:00
Important: rsyslog
2022-05-31 23:50:00
centos
centos
rsyslog security update
2012-07-10 17:21:56
rsyslog, rsyslog5 security update
2014-10-21 15:10:11
rsyslog security update
2014-10-13 19:45:27
f5
f5
K42903299 : rsyslog: remote syslog PRI vulnerability CVE-2014-3634
2017-07-06 00:00:00
freebsd
freebsd
rsyslog -- remote syslog PRI vulnerability
2014-09-30 00:00:00
mageia
mageia
Updated rsyslog packages fix CVE-2014-3634
2014-10-09 18:39:32
fedora
fedora
[SECURITY] Fedora 19 Update: sysklogd-1.5-18.fc19
2014-10-27 03:28:59
[SECURITY] Fedora 20 Update: rsyslog-7.4.8-2.fc20
2014-10-16 02:02:22
[SECURITY] Fedora 20 Update: sysklogd-1.5-18.fc20
2014-10-27 03:28:07