CVE-2011-1488
published 2019-11-14CVE-2011-1488: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.48%
38.1th percentile
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | rsyslog | < rsyslog 5.7.6-1 (bookworm) | rsyslog 5.7.6-1 (bookworm) |
| opensuse | opensuse | — | — |
| rsyslog | rsyslog | < 5.7.6 | 5.7.6 |
| rsyslog | rsyslog | — | — |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rsyslog: Memory leak when $RepeatedMsgReduction turned on
vendor_redhat·2011-02-25·CVSS 5.5
CVE-2011-1488 [MEDIUM] CWE-401 rsyslog: Memory leak when $RepeatedMsgReduction turned on
rsyslog: Memory leak when $RepeatedMsgReduction turned on
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
Statement: Not vulnerable. This issue did not affect the versions of rsyslog as
shipped with Red Hat Enterprise Linux 5 and 6.
Package: rsyslog (Red Hat Enterprise Linux 5) - Not affected
Package: rsyslog (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2011-1488: rsyslog - A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log ...
vendor_debian·2011·CVSS 5.5
CVE-2011-1488 [MEDIUM] CVE-2011-1488: rsyslog - A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log ...
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
Scope: local
bookworm: resolved (fixed in 5.7.6-1)
bullseye: resolved (fixed in 5.7.6-1)
forky: resolved (fixed in 5.7.6-1)
sid: resolved (fixed in 5.7.6-1)
trixie: resolved (fixed in 5.7.6-1)
GHSA
GHSA-3php-pxg5-vr69: A memory leak in rsyslog before 5
ghsa_unreviewed·2022-04-22
CVE-2011-1488 [LOW] GHSA-3php-pxg5-vr69: A memory leak in rsyslog before 5
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
OSV
CVE-2011-1488: A memory leak in rsyslog before 5
osv·2019-11-14·CVSS 5.5
CVE-2011-1488 [MEDIUM] CVE-2011-1488: A memory leak in rsyslog before 5
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlhttps://access.redhat.com/security/cve/cve-2011-1488https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2ahttps://security-tracker.debian.org/tracker/CVE-2011-1488http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlhttps://access.redhat.com/security/cve/cve-2011-1488https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2ahttps://security-tracker.debian.org/tracker/CVE-2011-1488
2019-11-14
Published