6.8

CVE-2013-4758

Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rsyslog ≫ Rsyslog Version <= 7.4.1
Rsyslog ≫ Rsyslog Update devel Version <= 7.5.1
Rsyslog ≫ Rsyslog Version 6.4.2
Rsyslog ≫ Rsyslog Version 6.5.1
Rsyslog ≫ Rsyslog Version 6.6.0
Rsyslog ≫ Rsyslog Version 7.1.0
Rsyslog ≫ Rsyslog Version 7.1.1
Rsyslog ≫ Rsyslog Version 7.1.2
Rsyslog ≫ Rsyslog Version 7.1.3
Rsyslog ≫ Rsyslog Version 7.1.4
Rsyslog ≫ Rsyslog Version 7.1.5
Rsyslog ≫ Rsyslog Version 7.1.6
Rsyslog ≫ Rsyslog Version 7.1.7
Rsyslog ≫ Rsyslog Version 7.1.8
Rsyslog ≫ Rsyslog Version 7.1.9
Rsyslog ≫ Rsyslog Version 7.1.10
Rsyslog ≫ Rsyslog Version 7.1.11
Rsyslog ≫ Rsyslog Version 7.1.12
Rsyslog ≫ Rsyslog Version 7.2.1
Rsyslog ≫ Rsyslog Version 7.2.2
Rsyslog ≫ Rsyslog Version 7.2.3
Rsyslog ≫ Rsyslog Version 7.2.4
Rsyslog ≫ Rsyslog Version 7.2.5
Rsyslog ≫ Rsyslog Version 7.2.6
Rsyslog ≫ Rsyslog Version 7.2.7
Rsyslog ≫ Rsyslog Version 7.3.0
Rsyslog ≫ Rsyslog Version 7.3.1
Rsyslog ≫ Rsyslog Version 7.3.3
Rsyslog ≫ Rsyslog Version 7.3.4
Rsyslog ≫ Rsyslog Version 7.3.5
Rsyslog ≫ Rsyslog Version 7.3.6
Rsyslog ≫ Rsyslog Version 7.3.7
Rsyslog ≫ Rsyslog Version 7.3.8
Rsyslog ≫ Rsyslog Version 7.3.9
Rsyslog ≫ Rsyslog Version 7.3.10
Rsyslog ≫ Rsyslog Version 7.3.11
Rsyslog ≫ Rsyslog Version 7.3.12
Rsyslog ≫ Rsyslog Version 7.3.13
Rsyslog ≫ Rsyslog Version 7.3.14
Rsyslog ≫ Rsyslog Version 7.3.15
Rsyslog ≫ Rsyslog Version 7.4.0
Rsyslog ≫ Rsyslog Version 7.5.0 Update devel
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.33% 0.813
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2013/07/05/2
http://www.rsyslog.com/rsyslog-7-4-2-v7-stable-released/
Patch
http://www.rsyslog.com/rsyslog-7-5-2-v7-devel-released/
Patch