Buffer overflow in rsyslog - CVE-2014-3634
Published: November 2, 2014 / Updated: July 28, 2020
Vulnerability identifier: #VU32475
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-3634
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
Affected software
rsyslog
Amazon Linux AMI
Gentoo Linux
SUSE Linux
Fedora
rsyslog (Alpine package)
sysklogd
rsyslog
Amazon Linux AMI
Gentoo Linux
SUSE Linux
Fedora
rsyslog (Alpine package)
sysklogd
rsyslog
How to mitigate CVE-2014-3634
Install update from vendor's website.
rsyslog - update to 7.6.6
rsyslog (Alpine package) - update to 8.4.2-r0
sysklogd - update to 1.5-18.fc21
rsyslog - update to 7.4.10-5.fc21
rsyslog (Alpine package) - update to 8.4.2-r0
sysklogd - update to 1.5-18.fc21
rsyslog - update to 7.4.10-5.fc21
External References
- http://advisories.mageia.org/MGASA-2014-0411.html
- http://linux.oracle.com/errata/ELSA-2014-1654
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2014-1397.html
- http://rhn.redhat.com/errata/RHSA-2014-1654.html
- http://rhn.redhat.com/errata/RHSA-2014-1671.html
- http://secunia.com/advisories/61494
- http://secunia.com/advisories/61720
- http://secunia.com/advisories/61930
- http://www.debian.org/security/2014/dsa-3040
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:130
- http://www.openwall.com/lists/oss-security/2014/09/30/15
- http://www.openwall.com/lists/oss-security/2014/10/03/1
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.rsyslog.com/remote-syslog-pri-vulnerability/
- http://www.ubuntu.com/usn/USN-2381-1
Related Security Bulletins
- Buffer overflow in rsyslog.com rsyslog
- Buffer overflow in rsyslog (Alpine package)
- SUSE Linux update for rsyslog
- Amazon Linux AMI update for rsyslog
- Gentoo update for RSYSLOG
- Amazon Linux AMI update for rsyslog
- Amazon Linux AMI update for rsyslog
- Fedora 21 update for rsyslog
- Fedora 21 update for sysklogd