Unscored severity · published Sep 25, 2012
CVE-2011-4623
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Rsyslog · Rsyslog
4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4623
bugzilla.adiscon.com
http://bugzilla.adiscon.com/show_bug.cgi?id=221
git.adiscon.com
http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=6bad782f154b7f838c7371bf99c13f6dc4ec4101
rsyslog.com
http://rsyslog.com/changelog-for-4-6-6-v4-stable/
rsyslog.com
http://rsyslog.com/changelog-for-5-7-4-v5-beta/
rsyslog.com
http://rsyslog.com/changelog-for-6-1-4-devel/
Vendor Advisory
http://secunia.com/advisories/45848
More from Rsyslog
9.8
CVE-2019-17042
An issue was discovered in Rsyslog v8.1908.0
9.8
CVE-2019-17041
An issue was discovered in Rsyslog v8.1908.0
9.8
CVE-2019-17040
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled
9.8
CVE-2017-12588
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact
8.2
CVE-2026-55556
Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling