Stack-based Buffer Overflow in rsyslogd Affecting Multiple Versions
CVE-2011-3200

Currently unrated

Key Information:

Vendor

Rsyslog

Status
Rsyslog
Vendor
CVE Published:
6 September 2011

What is CVE-2011-3200?

A stack-based buffer overflow vulnerability exists in the parseLegacySyslogMsg function of rsyslogd. This flaw may allow remote attackers to remotely send specially crafted legacy syslog messages with long TAGs, potentially leading to application crashes or denial of service. The affected versions include rsyslog 4.6.x prior to 4.6.8 and rsyslog 5.2.0 through 5.8.4, necessitating prompt mitigation measures for users operating these versions.

References

http://secunia.com/advisories/46027
third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=727644
x_refsource_CONFIRM
http://www.rsyslog.com/potential-dos-with-malformed-tag/
x_refsource_CONFIRM

EPSS Score

20% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.