CVE-2011-1155

🗓️ 30 Mar 2011 22:55:02Reported by [email protected]Type

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a newline or backslash character in a log filename, as demonstrated by a filename automatically constructed based on a hostname or virtual machine name

Reporter	Title	Published	Views	Family All 62
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2011-1155	30 Mar 201122:00	–	cve
Cvelist	CVE-2011-1155	30 Mar 201122:00	–	cvelist
Debian CVE	CVE-2011-1155	30 Mar 201122:00	–	debiancve
Oracle linux	logrotate security update	31 Mar 201100:00	–	oraclelinux
EUVD	EUVD-2011-1168	7 Oct 202500:30	–	euvd
F5 Networks	K16871: logrotate vulnerability CVE-2011-1155	21 Feb 202318:52	–	f5
F5 Networks	SOL16871 - logrotate vulnerability CVE-2011-1155	8 Jul 201500:00	–	f5

NVD

Node

gentoo logrotateRange≤3.7.9

gentoo logrotateMatch3.3r2

gentoo logrotateMatch3.5.9

gentoo logrotateMatch3.5.9r1

gentoo logrotateMatch3.6.5

gentoo logrotateMatch3.6.5r1

gentoo logrotateMatch3.7

gentoo logrotateMatch3.7.1

gentoo logrotateMatch3.7.1r1

gentoo logrotateMatch3.7.1r2

gentoo logrotateMatch3.7.2

gentoo logrotateMatch3.7.6

gentoo logrotateMatch3.7.7

gentoo logrotateMatch3.7.8

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html
openwall	www.openwall.com/lists/oss-security/2011/03/04/24
openwall	www.openwall.com/lists/oss-security/2011/03/04/26
openwall	www.openwall.com/lists/oss-security/2011/03/07/5
openwall	www.openwall.com/lists/oss-security/2011/03/04/18
openwall	www.openwall.com/lists/oss-security/2011/03/06/6
openwall	www.openwall.com/lists/oss-security/2011/03/11/5
openwall	www.openwall.com/lists/oss-security/2011/03/04/29
redhat	www.redhat.com/support/errata/RHSA-2011-0407.html

29 Apr 2026 01:13Current

6.1Medium risk

Vulners AI Score6.1

CVSS 21.9

EPSS0.00098

CWE-399