CVE-2011-3200

Опубликовано: 06 сент. 2011

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rsyslog:rsyslog:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.4:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.5:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.6:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:4.6.7:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:rsyslog:rsyslog:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.4:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.5:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.6:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.3.7:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.4.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.4.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.4.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.4:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.5:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.6:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.5.7:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.4:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.6.5:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.4:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.5:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.6:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.7:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.8:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.9:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.7.10:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.8.0:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.8.1:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.8.2:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.8.3:*:*:*:*:*:*:*

cpe:2.3:a:rsyslog:rsyslog:5.8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.62007

Средний

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2011-3200

ubuntu

почти 14 лет назад

CVE-2011-3200

redhat

почти 14 лет назад

CVE-2011-3200

debian

почти 14 лет назад

Stack-based buffer overflow in the parseLegacySyslogMsg function in to ...

GHSA-56wq-xcxw-c4q3

github

около 3 лет назад

ELSA-2011-1247

oracle-oval

почти 14 лет назад

ELSA-2011-1247: rsyslog security update (MODERATE)

EPSS

Процентиль: 98%

0.62007

Средний

5 Medium

CVSS2

Дефекты

CWE-119