Lucene search
Ubuntu.comUB:CVE-2011-4623HistoryDec 23, 2011 - 12:00 a.m.
CVE-2011-4623
2011-12-2300:00:00
ubuntu.com
ubuntu.com
14
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.1%
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in
the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x
before 6.1.4 allows local users to cause a denial of service (daemon hang)
via a large file, which triggers a heap-based buffer overflow.
Bugs
- <http://bugzilla.adiscon.com/show_bug.cgi?id=221>
- <https://bugzilla.redhat.com/show_bug.cgi?id=769822>
Notes
| Author | Note |
|---|---|
| tyhicks | The imfile module is built in Lucid and newer, but is not loaded in the default rsyslog config file. |
| jdstrand | introduced with d2d54013aebb756169182ed8716b142d27134a70 (part of 4.5.0) |
Related
cve
cve
CVE-2011-4623
2012-09-25 23:55:01
nessus
nessus
RHEL 6 : rsyslog (RHSA-2012:0796)
2012-06-20 00:00:00
Oracle Linux 6 : rsyslog (ELSA-2012-0796)
2013-07-12 00:00:00
Scientific Linux Security Update : rsyslog on SL6.x i386/x86_64 (20120620)
2012-08-01 00:00:00
cvelist
cvelist
CVE-2011-4623
2012-09-25 23:00:00
redhat
redhat
(RHSA-2012:0796) Moderate: rsyslog security, bug fix, and enhancement update
2012-06-20 00:00:00
ubuntu
ubuntu
Rsyslog vulnerability
2012-01-23 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2012-0796)
2015-10-06 00:00:00
Mandriva Update for rsyslog MDVSA-2012:100 (rsyslog)
2012-06-28 00:00:00
CentOS Update for rsyslog CESA-2012:0796 centos6
2012-07-30 00:00:00
oraclelinux
oraclelinux
rsyslog security, bug fix, and enhancement update
2012-06-27 00:00:00
debiancve
debiancve
CVE-2011-4623
2012-09-25 23:55:01
prion
prion
Integer overflow
2012-09-25 23:55:00
amazon
amazon
Medium: rsyslog
2012-07-06 16:04:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:20
nvd
nvd
CVE-2011-4623
2012-09-25 23:55:01
centos
centos
rsyslog security update
2012-07-10 17:21:56
gentoo
gentoo
RSYSLOG: Denial of service
2014-12-24 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2011-4623