Search vulnerabilities

Results 24

Export CSV
CVE-2018-16881

rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
CVE-2011-1490

rsyslog: Memory leak when multiple rulesets used

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2011-1489

rsyslog: Memory leak when multiple rulesets used

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2011-1488

rsyslog: Memory leak when $RepeatedMsgReduction turned on

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed