Denial of Service Vulnerability in Logrotate Product by Mark Nelson

CVE-2011-1155

What is CVE-2011-1155?

The Logrotate product, specifically version 3.7.9 and earlier, contains a vulnerability in the writeState function within logrotate.c. This flaw allows attackers to trigger a denial of service condition by crafting malicious log filenames that include newline or backslash characters. This exploit can result in a rotation outage, disrupting normal log processing operations. Attackers may leverage these file names, which are often generated based on hostnames or virtual machine names, to achieve their objectives. Users and system administrators should implement appropriate safeguards to prevent such attacks and ensure the integrity of logging processes.

References