CVE-2014-3634

CVE-2014-3634 and CVE-2014-3683 affect rsyslog (and sysklogd prior to 1.5). A crafted PRI value can trigger out-of-bounds/heap-based access, leading to denial of service and potentially remote code execution. In practice, rsyslog versions affected include 7.x before 7.6.7 and 8.x before 8.4.2 (an...