CVE-2011-1490: Medium severity rsyslog Rsyslog vulnerability
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2011-1490?
CVE-2011-1490 is a vulnerability in rsyslog before version 5.7.6 that could cause a memory leak and denial of service.
How does CVE-2011-1490 affect Rsyslog and Debian Linux?
CVE-2011-1490 affects Rsyslog versions before 5.7.6 and Debian Linux versions 8.0, 9.0, and 10.0.
What is the severity of CVE-2011-1490?
CVE-2011-1490 has a severity rating of medium, with a severity value of 5.5.
How can CVE-2011-1490 be exploited?
CVE-2011-1490 can be exploited by a local attacker sending a malicious log message, causing a memory leak and denial of service.
How can I fix CVE-2011-1490 in Debian Linux?
To fix CVE-2011-1490 in Debian Linux, update to the recommended versions: 8.1901.0-1+deb10u2, 8.2102.0-2+deb11u1, 8.2302.0-1, or 8.2310.0-2.