Integer Overflow in rsyslog Allows Denial of Service via Large File
CVE-2011-4623

Currently unrated

Key Information:

Vendor

Rsyslog

Status
Rsyslog
Vendor
CVE Published:
25 September 2012

What is CVE-2011-4623?

An integer overflow vulnerability exists in the rsCStrExtendBuf function of rsyslog, affecting versions prior to 4.6.6, 5.7.4, and 6.1.4. This issue allows local users to exploit the vulnerability by submitting a large file, which can cause a denial of service through a heap-based buffer overflow, leading to the daemon becoming unresponsive. Timely patching is essential to mitigate this risk and protect system integrity.

References

http://bugzilla.adiscon.com/show_bug.cgi?id=221
x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1338-1
vendor-advisoryx_refsource_UBUNTU
http://rsyslog.com/changelog-for-6-1-4-devel/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.