← Voltar para CVEs
CVE-2011-1489
MEDIUM5.5
Descricao
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Detalhes CVE
Pontuacao CVSS v3.15.5
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado11/14/2019
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
debian:debian_linuxopensuse:opensusersyslog:rsyslog
Fraquezas (CWE)
CWE-772
Referencias
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html(secalert@redhat.com)
https://access.redhat.com/security/cve/cve-2011-1489(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489(secalert@redhat.com)
https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a(secalert@redhat.com)
https://security-tracker.debian.org/tracker/CVE-2011-1489(secalert@redhat.com)
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/cve-2011-1489(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a(af854a3a-2127-422b-91ae-364da2661108)
https://security-tracker.debian.org/tracker/CVE-2011-1489(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.