CVE-2011-1155: Low severity logrotate vulnerability
A denial of service flaw was found in the way the logrotate utility performed arguments sanitization, when performing the 'write state' action. A local attacker could use this flaw to cause abort in subsequent logrotate runs via a specially-crafted log file name.
Other sources
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1155?
CVE-2011-1155 is classified as a denial of service vulnerability.
How do I fix CVE-2011-1155?
To address CVE-2011-1155, update logrotate to the latest available version.
What versions of logrotate are affected by CVE-2011-1155?
Logrotate versions up to 3.7.9 and certain specific earlier versions are affected by CVE-2011-1155.
Who can exploit CVE-2011-1155?
CVE-2011-1155 can be exploited by local attackers with the ability to craft a malicious log file name.
What kind of issue does CVE-2011-1155 cause?
CVE-2011-1155 can cause a denial of service, leading to abort in subsequent logrotate executions.