Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3683
HistoryOct 02, 2014 - 12:00 a.m.

CVE-2014-3683

2014-10-0200:00:00
ubuntu.com
ubuntu.com
9

0.132 Low

EPSS

Percentile

95.5%

JSON

Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd
1.5 and earlier allows remote attackers to cause a denial of service
(crash) via a large priority (PRI) value. NOTE: this vulnerability exists
because of an incomplete fix for CVE-2014-3634.

Notes

Author Note
mdeslaur incomplete fix for CVE-2014-3634
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrsyslog< 4.2.0-2ubuntu8.3UNKNOWN
ubuntu12.04noarchrsyslog< 5.8.6-1ubuntu8.9UNKNOWN
ubuntu14.04noarchrsyslog< 7.4.4-1ubuntu2.3UNKNOWN
ubuntu14.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu15.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu15.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu16.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu16.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu17.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN

Related

nessus 35
aix 1
securityvulns 2
suse 1
openvas 23
debiancve 2
ibm 2
cve 3
osv 4
debian 3
prion 3
ubuntucve 1
altlinux 1
cvelist 2
ubuntu 1
gentoo 1
checkpoint_advisories 1
archlinux 2
fedora 5
veracode 1
redhat 3
centos 3
f5 1
mageia 1
freebsd 1
oraclelinux 3
amazon 3
nessus
nessus
Debian DSA-3047-1 : rsyslog - security update
2014-10-09 00:00:00
AIX rsyslog Advisory : rsyslog_advisory.asc
2014-12-02 00:00:00
openSUSE Security Update : rsyslog (openSUSE-SU-2014:1297-1)
2014-10-16 00:00:00
aix
aix
Open Source RSyslog vulnerability
2014-11-14 15:31:13
securityvulns
securityvulns
rsyslog DoS
2014-10-05 00:00:00
[SECURITY] [DSA 3040-1] rsyslog security update
2014-10-05 00:00:00
suse
suse
Security update for rsyslog (important)
2014-10-15 00:04:46
openvas
openvas
Debian: Security Advisory (DSA-3047-1)
2014-10-07 00:00:00
Debian Security Advisory DSA 3047-1 (rsyslog - security update)
2014-10-08 00:00:00
SUSE: Security Advisory for rsyslog (SUSE-SU-2014:1294-1)
2015-10-13 00:00:00
debiancve
debiancve
CVE-2014-3683
2014-11-02 00:55:00
CVE-2014-3634
2014-11-02 00:55:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in rsyslog affect IBM Flex System Manager (FSM): (CVE-2014-3634 and CVE-2014-3683)
2019-01-31 01:45:01
Security Bulletin: Vulnerability in rsyslog affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3634)
2018-06-17 22:30:12
cve
cve
CVE-2014-3683
2014-11-02 00:55:00
CVE-2014-3634
2014-11-02 00:55:00
CVE-2014-6388
2014-10-13 18:55:00
osv
osv
rsyslog - regression update
2014-10-19 00:00:00
rsyslog - security update
2014-10-19 00:00:00
rsyslog - security update
2014-10-08 00:00:00
debian
debian
[SECURITY] [DLA 72-1] rsylog security update
2014-10-19 17:00:31
[SECURITY] [DSA 3047-1] rsyslog security update
2014-10-08 11:12:07
[SECURITY] [DSA 3040-1] rsyslog security update
2014-09-30 21:14:26
prion
prion
Integer overflow
2014-11-02 00:55:00
Out-of-bounds
2014-11-02 00:55:00
Design/Logic Flaw
2014-10-13 18:55:00
ubuntucve
ubuntucve
CVE-2014-3634
2014-10-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1
2014-10-13 00:00:00
cvelist
cvelist
CVE-2014-3683
2014-11-02 00:00:00
CVE-2014-3634
2014-11-02 00:00:00
ubuntu
ubuntu
Rsyslog vulnerabilities
2014-10-09 00:00:00
gentoo
gentoo
RSYSLOG: Denial of service
2014-12-24 00:00:00
checkpoint_advisories
checkpoint_advisories
RSYSLOG PRI Value Parsing Integer Overflow Denial of Service (CVE-2014-3683)
2014-12-02 00:00:00
archlinux
archlinux
rsyslog: remote denial of service
2014-10-08 00:00:00
rsyslog: remote denial of service
2014-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: sysklogd-1.5-18.fc19
2014-10-27 03:28:59
[SECURITY] Fedora 20 Update: rsyslog-7.4.8-2.fc20
2014-10-16 02:02:22
[SECURITY] Fedora 20 Update: sysklogd-1.5-18.fc20
2014-10-27 03:28:07
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:02:37
redhat
redhat
(RHSA-2014:1397) Important: rsyslog security update
2014-10-13 00:00:00
(RHSA-2014:1654) Important: rsyslog7 security update
2014-10-16 00:00:00
(RHSA-2014:1671) Moderate: rsyslog5 and rsyslog security update
2014-10-20 00:00:00
centos
centos
rsyslog, rsyslog5 security update
2014-10-21 15:10:11
rsyslog security update
2014-10-13 19:45:27
rsyslog7 security update
2014-10-20 18:15:12
f5
f5
K42903299 : rsyslog: remote syslog PRI vulnerability CVE-2014-3634
2017-07-06 00:00:00
mageia
mageia
Updated rsyslog packages fix CVE-2014-3634
2014-10-09 18:39:32
freebsd
freebsd
rsyslog -- remote syslog PRI vulnerability
2014-09-30 00:00:00
oraclelinux
oraclelinux
rsyslog5 and rsyslog security update
2014-10-20 00:00:00
rsyslog security update
2014-10-13 00:00:00
rsyslog7 security update
2014-10-21 00:00:00
amazon
amazon
Medium: rsyslog
2014-11-11 10:26:00
Important: rsyslog
2022-05-31 23:50:00
Important: rsyslog
2022-05-31 23:47:00

0.132 Low

EPSS

Percentile

95.5%

JSON
Related for UB:CVE-2014-3683
nessus35aix1securityvulns2suse1openvas23debiancve2ibm2cve3osv4debian3prion3ubuntucve1altlinux1cvelist2ubuntu1gentoo1checkpoint_advisories1archlinux2fedora5veracode1redhat3centos3f51mageia1freebsd1oraclelinux3amazon3