CVE-2011-1489: Medium severity rsyslog Rsyslog vulnerability
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2011-1489?
CVE-2011-1489 is a memory leak vulnerability in rsyslog before version 5.7.6.
How does CVE-2011-1489 affect rsyslog?
CVE-2011-1489 affects rsyslog versions before 5.7.6 by causing a memory leak when processing log messages with multiple rulesets.
What is the severity of CVE-2011-1489?
The severity of CVE-2011-1489 is medium with a CVSS score of 5.5.
Which software is affected by CVE-2011-1489?
Rsyslog versions before 5.7.6, Opensuse 11.4, and Debian Linux 8.0, 9.0, and 10.0 are affected by CVE-2011-1489.
How can I fix CVE-2011-1489?
To fix CVE-2011-1489, update rsyslog to version 5.7.6 or later.