CVE-2011-1489

MEDIUM

rsyslog <5.7.6 - Memory Corruption

Title source: llm

Description

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

Scores

CVSS v3 5.5
EPSS 0.0015
EPSS Percentile 35.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-772
Status published

Affected Products (5)

rsyslog/rsyslog < 5.7.6
opensuse/opensuse
debian/debian_linux
debian/debian_linux
debian/debian_linux

Timeline

Published Nov 14, 2019
Tracked Since Feb 18, 2026