Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-3683
HistoryNov 02, 2014 - 12:55 a.m.

CVE-2014-3683

2014-11-0200:55:05
CWE-189
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.9

Confidence

High

EPSS

0.228

Percentile

96.5%

JSON

Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634.

Affected configurations

Nvd
Node
rsyslogrsyslogRange≤7.6.6
OR
rsyslogrsyslogMatch8.1.0
OR
rsyslogrsyslogMatch8.1.1
OR
rsyslogrsyslogMatch8.1.2
OR
rsyslogrsyslogMatch8.1.3
OR
rsyslogrsyslogMatch8.1.4
OR
rsyslogrsyslogMatch8.1.5
OR
rsyslogrsyslogMatch8.1.6
OR
rsyslogrsyslogMatch8.2.0
OR
rsyslogrsyslogMatch8.2.1
OR
rsyslogrsyslogMatch8.2.2
OR
rsyslogrsyslogMatch8.2.3
OR
rsyslogrsyslogMatch8.3.0
OR
rsyslogrsyslogMatch8.3.1
OR
rsyslogrsyslogMatch8.3.2
OR
rsyslogrsyslogMatch8.3.3
OR
rsyslogrsyslogMatch8.3.4
OR
rsyslogrsyslogMatch8.3.5
OR
rsyslogrsyslogMatch8.4.0
OR
rsyslogrsyslogMatch8.4.1
Node
sysklogd_projectsysklogdRange≤1.5
OR
sysklogd_projectsysklogdMatch1.1
OR
sysklogd_projectsysklogdMatch1.2
OR
sysklogd_projectsysklogdMatch1.3
OR
sysklogd_projectsysklogdMatch1.4
OR
sysklogd_projectsysklogdMatch1.4.1
VendorProductVersionCPE
rsyslogrsyslog*cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*
rsyslogrsyslog8.1.0cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:*
rsyslogrsyslog8.1.1cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:*
rsyslogrsyslog8.1.2cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:*
rsyslogrsyslog8.1.3cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:*
rsyslogrsyslog8.1.4cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:*
rsyslogrsyslog8.1.5cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:*
rsyslogrsyslog8.1.6cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:*
rsyslogrsyslog8.2.0cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:*
rsyslogrsyslog8.2.1cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 261

Related

nessus 36
aix 1
openvas 23
ibm 2
cve 3
securityvulns 2
debiancve 2
suse 1
prion 3
ubuntucve 2
osv 6
debian 3
ubuntu 1
cvelist 2
altlinux 1
gentoo 1
checkpoint_advisories 1
archlinux 2
fedora 5
veracode 1
redhat 3
mageia 1
f5 1
freebsd 1
centos 3
oraclelinux 3
amazon 3
nvd 2
nessus
nessus
Debian DSA-3047-1 : rsyslog - security update
2014-10-09 00:00:00
openSUSE Security Update : rsyslog (openSUSE-SU-2014:1297-1)
2014-10-16 00:00:00
SUSE SLED12 / SLES12 Security Update : update for rsyslog (SUSE-SU-2014:1438-1)
2015-05-20 00:00:00
aix
aix
Open Source RSyslog vulnerability
2014-11-14 15:31:13
openvas
openvas
Debian Security Advisory DSA 3047-1 (rsyslog - security update)
2014-10-08 00:00:00
SUSE: Security Advisory for rsyslog (SUSE-SU-2014:1294-1)
2015-10-13 00:00:00
Debian: Security Advisory (DSA-3047-1)
2014-10-07 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in rsyslog affect IBM Flex System Manager (FSM): (CVE-2014-3634 and CVE-2014-3683)
2019-01-31 01:45:01
Security Bulletin: Vulnerability in rsyslog affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3634)
2018-06-17 22:30:12
cve
cve
CVE-2014-3683
2014-11-02 00:55:05
CVE-2014-3634
2014-11-02 00:55:05
CVE-2014-6388
2014-10-13 18:55:01
securityvulns
securityvulns
rsyslog DoS
2014-10-05 00:00:00
[SECURITY] [DSA 3040-1] rsyslog security update
2014-10-05 00:00:00
debiancve
debiancve
CVE-2014-3683
2014-11-02 00:55:05
CVE-2014-3634
2014-11-02 00:55:05
suse
suse
Security update for rsyslog (important)
2014-10-15 00:04:46
prion
prion
Integer overflow
2014-11-02 00:55:00
Out-of-bounds
2014-11-02 00:55:00
Design/Logic Flaw
2014-10-13 18:55:00
ubuntucve
ubuntucve
CVE-2014-3683
2014-10-02 00:00:00
CVE-2014-3634
2014-10-01 00:00:00
osv
osv
rsyslog - regression update
2014-10-19 00:00:00
rsyslog - security update
2014-10-19 00:00:00
rsyslog - security update
2014-10-08 00:00:00
debian
debian
[SECURITY] [DLA 72-1] rsylog security update
2014-10-19 16:52:50
[SECURITY] [DSA 3047-1] rsyslog security update
2014-10-08 11:09:01
[SECURITY] [DSA 3040-1] rsyslog security update
2014-09-30 21:13:13
ubuntu
ubuntu
Rsyslog vulnerabilities
2014-10-09 00:00:00
cvelist
cvelist
CVE-2014-3683
2014-11-02 00:00:00
CVE-2014-3634
2014-11-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1
2014-10-13 00:00:00
gentoo
gentoo
RSYSLOG: Denial of service
2014-12-24 00:00:00
checkpoint_advisories
checkpoint_advisories
RSYSLOG PRI Value Parsing Integer Overflow Denial of Service (CVE-2014-3683)
2014-12-02 00:00:00
archlinux
archlinux
rsyslog: remote denial of service
2014-10-08 00:00:00
rsyslog: remote denial of service
2014-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: sysklogd-1.5-18.fc19
2014-10-27 03:28:59
[SECURITY] Fedora 20 Update: rsyslog-7.4.8-2.fc20
2014-10-16 02:02:22
[SECURITY] Fedora 20 Update: sysklogd-1.5-18.fc20
2014-10-27 03:28:07
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:02:37
redhat
redhat
(RHSA-2014:1397) Important: rsyslog security update
2014-10-13 00:00:00
(RHSA-2014:1654) Important: rsyslog7 security update
2014-10-16 00:00:00
(RHSA-2014:1671) Moderate: rsyslog5 and rsyslog security update
2014-10-20 00:00:00
mageia
mageia
Updated rsyslog packages fix CVE-2014-3634
2014-10-09 18:39:32
f5
f5
K42903299 : rsyslog: remote syslog PRI vulnerability CVE-2014-3634
2017-07-06 00:00:00
freebsd
freebsd
rsyslog -- remote syslog PRI vulnerability
2014-09-30 00:00:00
centos
centos
rsyslog, rsyslog5 security update
2014-10-21 15:10:11
rsyslog7 security update
2014-10-20 18:15:12
rsyslog security update
2014-10-13 19:45:27
oraclelinux
oraclelinux
rsyslog7 security update
2014-10-21 00:00:00
rsyslog security update
2014-10-13 00:00:00
rsyslog5 and rsyslog security update
2014-10-20 00:00:00
amazon
amazon
Medium: rsyslog
2014-11-11 10:26:00
Important: rsyslog
2022-05-31 23:50:00
Important: rsyslog
2022-05-31 23:47:00
nvd
nvd
CVE-2014-3634
2014-11-02 00:55:05
CVE-2014-6388
2014-10-13 18:55:01

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.9

Confidence

High

EPSS

0.228

Percentile

96.5%

JSON
Related for NVD:CVE-2014-3683
nessus36aix1openvas23ibm2cve3securityvulns2debiancve2suse1prion3ubuntucve2osv6debian3ubuntu1cvelist2altlinux1gentoo1checkpoint_advisories1archlinux2fedora5veracode1redhat3mageia1f51freebsd1centos3oraclelinux3amazon3nvd2