SuSE 11.3 Security Update : rsyslog (SAT Patch Number 9840)

rsyslog has been updated to fix a remote denial of service issue : - Under certain configurations, a local or remote attacker able to send syslog messages to the server could have crashed the log server due to an array overread. CVE-2014-3634 / CVE-2014-3683 %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : rsyslog on SL7.x x86_64 (20141013)

A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, or a remote attacker able to connect to the rsyslog port, could use this flaw to crash the rsyslog daemon or, potentially, execute arbitrary code as the user running the...

Oracle Linux 7 : rsyslog (ELSA-2014-1397)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1397 advisory. 7.4.7-7.0.1 - use setsid to get a controlling session and process group Orabug: 17346261 Todd Vierling 7.4.7-7 - fix CVE-2014-3634 resolves: 1149152 Tenable has...

CentOS 7 : rsyslog (CESA-2014:1397)

Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

RedHat Update for rsyslog RHSA-2014:1397-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for rsyslog CESA-2014:1397 centos7

Check the version of rsyslog SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882053";...

RHEL 7 : rsyslog (RHSA-2014:1397)

Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

rsyslog: remote syslog PRI vulnerability

A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, or a remote attacker able to connect to the rsyslog port, could use this flaw to crash the rsyslog daemon or, potentially in rsyslog 7.x, execute arbitrary code as the use...

Important: Red Hat Security Advisory: rsyslog security update

Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

rsyslog security update

CentOS Errata and Security Advisory CESA-2014:1397 Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, whic...

Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1

7.6.7-alt0.M70P.1 built Oct. 13, 2014 Alexey Shabalin in task 131847 Oct. 9, 2014 Alexey Shabalin - 7.6.7 - fixed CVE-2014-3634, CVE-2014-3683...

rsyslog security update

7.4.7-7.0.1 - use setsid to get a controlling session and process group Orabug: 17346261 Todd Vierling 7.4.7-7 - fix CVE-2014-3634 resolves: 1149152...

Ubuntu 14.04 LTS : Rsyslog vulnerabilities (USN-2381-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2381-1 advisory. It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server...

Ubuntu: Security Advisory (USN-2381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2381-1: Rsyslog vulnerabilities

It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server and cause it to stop responding, resulting in a denial of service and possibly message loss. CVE-2014-3634, CVE-2014-3683...

USN-2381-1 rsyslog vulnerabilities

It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server and cause it to stop responding, resulting in a denial of service and possibly message loss. CVE-2014-3634, CVE-2014-3683...

MGASA-2014-0411 Updated rsyslog packages fix CVE-2014-3634

Updated rsyslog packages fix security vulnerability: Rainer Gerhards, the rsyslog project leader, reported a vulnerability in Rsyslog. As a consequence of this vulnerability an attacker can send malformed messages to a server, if this one accepts data from untrusted sources, and trigger a denial ...

Updated rsyslog packages fix CVE-2014-3634

Updated rsyslog packages fix security vulnerability: Rainer Gerhards, the rsyslog project leader, reported a vulnerability in Rsyslog. As a consequence of this vulnerability an attacker can send malformed messages to a server, if this one accepts data from untrusted sources, and trigger a denial ...

Debian DSA-3047-1 : rsyslog - security update

Mancha discovered a vulnerability in rsyslog, a system for log processing. This vulnerability is an integer overflow that can be triggered by malformed messages to a server, if this one accepts data from untrusted sources, provoking message loss, denial of service and, potentially, remote code...

[SECURITY] [DSA 3047-1] rsyslog security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3047-1 [email protected] http://www.debian.org/security/ Luciano Bello October 08, 2014 http://www.debian.org/security/faq -...