906 matches found
CVE-2017-12588
Multiple format string vulnerabilities were found in the zmq3 modules in rsyslog. A local attacker could potentially use these flaws to crash the rsyslog daemon under certain circumstances...
Adiscon rsyslog zmq3 input and output module string vulnerability
Adiscon rsyslog is a multithreaded enhancement of syslogd from Adiscon Germany, which is mainly used to collect system logs. zmq3 input and output modules is one of the input and output modules. A security vulnerability exists in the zmq3 input and output module in versions of Adiscon rsyslog pri...
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
Format string
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
DEBIAN-CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
CVE-2017-12588
CVE-2017-12588 affects rsyslog’s zmq3 input/output modules prior to 8.28.0, where description fields are interpreted as format strings, enabling a format-string attack. Impact is described as unspecified. Affected component: rsyslog (zmq3 modules). Mitigation: upgrade to rsyslog 8.28.0 or newer (...
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact...
DEBIAN-CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
Information disclosure
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron...
CVE-2015-3243
CVE-2015-3243 affects rsyslog. The issue arises from weak permissions used when generating log files, allowing local users to read files in /var/log/cron and obtain sensitive information. Connected advisories reference RSYSLOG updates/patches from SUSE/OpenSUSE and related vulnerability plugins, ...
PT-2017-4282 · Rsyslog +1 · Rsyslog +1
Name of the Vulnerable Software and Affected Versions: Rsyslog versions prior to 8.28.0 Description: The issue is related to insufficient processing of format strings in the input/output modules of the Rsyslog utility for log processing. Exploitation of this issue could allow a remote attacker to...
PT-2017-4326 · Rsyslog +5 · Rsyslog +5
Name of the Vulnerable Software and Affected Versions: rsyslog versions prior to 8.27.0 Description: The issue is related to an integer overflow in the imptcp module of the Rsyslog log processing utility. It allows a remote attacker to cause a denial of service. An attacker could send a specially...