Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1490

Опубликовано: 14 нояб. 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*
Версия до 5.7.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

EPSS

Процентиль: 37%
0.00153
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

redhat
почти 15 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

CVSS3: 5.5
debian
около 6 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon proc ...

CVSS3: 5.5
github
больше 3 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

EPSS

Процентиль: 37%
0.00153
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-772