CVE-2011-1490
published 2019-11-14CVE-2011-1490: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.38%
30.6th percentile
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | rsyslog | < rsyslog 5.7.6-1 (bookworm) | rsyslog 5.7.6-1 (bookworm) |
| opensuse | opensuse | — | — |
| rsyslog | rsyslog | < 5.7.6 | 5.7.6 |
| rsyslog | rsyslog | — | — |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
| rsyslog | rsyslog | >= 0 < 5.7.6-1 | 5.7.6-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rsyslog: Memory leak when multiple rulesets used
vendor_redhat·2011-02-25·CVSS 5.5
CVE-2011-1490 [MEDIUM] CWE-401 rsyslog: Memory leak when multiple rulesets used
rsyslog: Memory leak when multiple rulesets used
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
Statement: Not vulnerable. This issue did not affect the versions of rsyslog as
shipped with Red Hat Enterprise Linux 5 and 6.
Package: rsyslog (Red Hat Enterprise Linux 5) - Not affected
Package: rsyslog (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2011-1490: rsyslog - A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log ...
vendor_debian·2011·CVSS 5.5
CVE-2011-1490 [MEDIUM] CVE-2011-1490: rsyslog - A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log ...
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
Scope: local
bookworm: resolved (fixed in 5.7.6-1)
bullseye: resolved (fixed in 5.7.6-1)
forky: resolved (fixed in 5.7.6-1)
sid: resolved (fixed in 5.7.6-1)
trixie: resolved (fixed in 5.7.6-1)
GHSA
GHSA-ph9m-fj6v-j5p3: A memory leak in rsyslog before 5
ghsa_unreviewed·2022-04-22
CVE-2011-1490 [MEDIUM] CWE-772 GHSA-ph9m-fj6v-j5p3: A memory leak in rsyslog before 5
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
OSV
CVE-2011-1490: A memory leak in rsyslog before 5
osv·2019-11-14·CVSS 5.5
CVE-2011-1490 [MEDIUM] CVE-2011-1490: A memory leak in rsyslog before 5
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlhttps://access.redhat.com/security/cve/cve-2011-1490https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2ahttps://security-tracker.debian.org/tracker/CVE-2011-1490http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlhttps://access.redhat.com/security/cve/cve-2011-1490https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2ahttps://security-tracker.debian.org/tracker/CVE-2011-1490
2019-11-14
Published