(RHSA-2011:1247) Moderate: rsyslog security update

2011-09-0100:00:00

access.redhat.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.143 Low

EPSS

Percentile

95.2%

JSON

The rsyslog packages provide an enhanced, multi-threaded syslog daemon that
supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on
any message part, and fine grained output format control.

A two byte buffer overflow flaw was found in the rsyslog daemon’s
parseLegacySyslogMsg function. An attacker able to submit log messages to
rsyslogd could use this flaw to crash the daemon. (CVE-2011-3200)

All rsyslog users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing this update, the
rsyslog daemon will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat6s390xrsyslog-gssapi< 4.6.2-3.el6_1.2rsyslog-gssapi-4.6.2-3.el6_1.2.s390x.rpm
RedHat6x86_64rsyslog-pgsql< 4.6.2-3.el6_1.2rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm
RedHat6i686rsyslog< 4.6.2-3.el6_1.2rsyslog-4.6.2-3.el6_1.2.i686.rpm
RedHat6ppc64rsyslog< 4.6.2-3.el6_1.2rsyslog-4.6.2-3.el6_1.2.ppc64.rpm
RedHat6i686rsyslog-mysql< 4.6.2-3.el6_1.2rsyslog-mysql-4.6.2-3.el6_1.2.i686.rpm
RedHat6srcrsyslog< 4.6.2-3.el6_1.2rsyslog-4.6.2-3.el6_1.2.src.rpm
RedHat6ppc64rsyslog-gssapi< 4.6.2-3.el6_1.2rsyslog-gssapi-4.6.2-3.el6_1.2.ppc64.rpm
RedHat6ppc64rsyslog-gnutls< 4.6.2-3.el6_1.2rsyslog-gnutls-4.6.2-3.el6_1.2.ppc64.rpm
RedHat6x86_64rsyslog-debuginfo< 4.6.2-3.el6_1.2rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm
RedHat6s390xrsyslog-mysql< 4.6.2-3.el6_1.2rsyslog-mysql-4.6.2-3.el6_1.2.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	s390x	rsyslog-gssapi	< 4.6.2-3.el6_1.2	rsyslog-gssapi-4.6.2-3.el6_1.2.s390x.rpm
RedHat	6	x86_64	rsyslog-pgsql	< 4.6.2-3.el6_1.2	rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm
RedHat	6	i686	rsyslog	< 4.6.2-3.el6_1.2	rsyslog-4.6.2-3.el6_1.2.i686.rpm
RedHat	6	ppc64	rsyslog	< 4.6.2-3.el6_1.2	rsyslog-4.6.2-3.el6_1.2.ppc64.rpm
RedHat	6	i686	rsyslog-mysql	< 4.6.2-3.el6_1.2	rsyslog-mysql-4.6.2-3.el6_1.2.i686.rpm
RedHat	6	src	rsyslog	< 4.6.2-3.el6_1.2	rsyslog-4.6.2-3.el6_1.2.src.rpm
RedHat	6	ppc64	rsyslog-gssapi	< 4.6.2-3.el6_1.2	rsyslog-gssapi-4.6.2-3.el6_1.2.ppc64.rpm
RedHat	6	ppc64	rsyslog-gnutls	< 4.6.2-3.el6_1.2	rsyslog-gnutls-4.6.2-3.el6_1.2.ppc64.rpm
RedHat	6	x86_64	rsyslog-debuginfo	< 4.6.2-3.el6_1.2	rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm
RedHat	6	s390x	rsyslog-mysql	< 4.6.2-3.el6_1.2	rsyslog-mysql-4.6.2-3.el6_1.2.s390x.rpm