Memory Leak Vulnerability in Rsyslog Affects Multiple Ruleset Processing

CVE-2011-1489

What is CVE-2011-1489?

A memory leak in Rsyslog prior to version 5.7.6 affects how the daemon processes log messages, particularly when handling multiple rulesets. This flaw occurs when output batches contain messages from more than one ruleset, allowing a local attacker to exploit the vulnerability. By sending specially crafted log messages, the attacker can trigger a denial of service, disrupting the normal functioning of the rsyslogd daemon and potentially affecting all operations reliant on logging services.

References