Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-1490

Опубликовано: 25 фев. 2011
Источник: redhat
CVSS2: 4.4
EPSS Низкий

Описание

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

Отчет

Not vulnerable. This issue did not affect the versions of rsyslog as shipped with Red Hat Enterprise Linux 5 and 6.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5rsyslogNot affected
Red Hat Enterprise Linux 6rsyslogNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-401
https://bugzilla.redhat.com/show_bug.cgi?id=694126rsyslog: Memory leak when multiple rulesets used

EPSS

Процентиль: 37%
0.00153
Низкий

4.4 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

CVSS3: 5.5
nvd
около 6 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

CVSS3: 5.5
debian
около 6 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon proc ...

CVSS3: 5.5
github
больше 3 лет назад

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

EPSS

Процентиль: 37%
0.00153
Низкий

4.4 Medium

CVSS2