Поиск уязвимостей
Количество 31
Количество 31
CVE-2022-1348
A vulnerability was found in logrotate in how the state file is create ...
CVE-2011-1155
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
CVE-2011-1155
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
CVE-2011-1155
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
CVE-2011-1155
The writeState function in logrotate.c in logrotate 3.7.9 and earlier ...
SUSE-SU-2022:2396-1
Security update for logrotate
RLSA-2022:8393
Moderate: logrotate security update
GHSA-fcm8-m55c-7v4r
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
GHSA-4c4j-w8hm-rjgv
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
ELSA-2022-8393
ELSA-2022-8393: logrotate security update (MODERATE)
ALT-PU-2022-1955
ALT-PU-2022-1955: package `logrotate` update to version 3.20.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2022-1348 A vulnerability was found in logrotate in how the state file is create ... | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2011-1155 The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. | CVSS2: 1.9 | 0% Низкий | больше 15 лет назад |
 | CVE-2011-1155 The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. | CVSS2: 1.9 | 0% Низкий | больше 15 лет назад |
 | CVE-2011-1155 The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. | CVSS2: 1.9 | 0% Низкий | больше 15 лет назад |
| CVE-2011-1155 The writeState function in logrotate.c in logrotate 3.7.9 and earlier ... | CVSS2: 1.9 | 0% Низкий | больше 15 лет назад |
 | SUSE-SU-2022:2396-1 Security update for logrotate | 2% Низкий | больше 4 лет назад | |
 | RLSA-2022:8393 Moderate: logrotate security update | 2% Низкий | почти 4 года назад | |
| GHSA-fcm8-m55c-7v4r The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. | 0% Низкий | больше 4 лет назад | |
| GHSA-4c4j-w8hm-rjgv A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| ELSA-2022-8393 ELSA-2022-8393: logrotate security update (MODERATE) | 2% Низкий | почти 4 года назад | |
| ALT-PU-2022-1955 ALT-PU-2022-1955: package `logrotate` update to version 3.20.1-alt1 | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу