RSyslog Function Imfile Module Buffer Overflow Vulnerability
BID:51171
Info
RSyslog Function Imfile Module Buffer Overflow Vulnerability
| Bugtraq ID: | 51171 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-4623 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 22 2011 12:00AM |
| Updated: | Jan 06 2015 01:01AM |
| Credit: | Peter Eisentraut |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 RSyslog RSyslog 4.1.1 RSyslog RSyslog 4.1 RSyslog RSyslog 3.21.9 RSyslog RSyslog 3.20.2 RSyslog RSyslog 3.20.1 RSyslog RSyslog 3.20 RSyslog RSyslog 3.12.1 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Gentoo Linux Avaya Aura Experience Portal 6.0 |
| Not Vulnerable: | |
Discussion
RSyslog Function Imfile Module Buffer Overflow Vulnerability
RSyslog is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
RSyslog is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
RSyslog Function Imfile Module Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RSyslog Function Imfile Module Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
RSyslog Function Imfile Module Buffer Overflow Vulnerability
References:
References:
- (CVE-2011-4623) rsyslog: DoS due integer signedness error while extending rsyslo (Red Hat Bugzilla)
- RSyslog Homepage (RSyslog)