CVE-2011-1489
First published: Thu Nov 14 2019(Updated: )
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rsyslog Rsyslog | <5.7.6 | |
| openSUSE openSUSE | =11.4 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| debian/rsyslog | 8.2102.0-2+deb11u1 8.2302.0-1 8.2406.0-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://security-tracker.debian.org/tracker/CVE-2011-1489
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html
- https://access.redhat.com/security/cve/cve-2011-1489
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489
- https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a
Frequently Asked Questions
What is CVE-2011-1489?
CVE-2011-1489 is a memory leak vulnerability in rsyslog before version 5.7.6.
How does CVE-2011-1489 affect rsyslog?
CVE-2011-1489 affects rsyslog versions before 5.7.6 by causing a memory leak when processing log messages with multiple rulesets.
What is the severity of CVE-2011-1489?
The severity of CVE-2011-1489 is medium with a CVSS score of 5.5.
Which software is affected by CVE-2011-1489?
Rsyslog versions before 5.7.6, Opensuse 11.4, and Debian Linux 8.0, 9.0, and 10.0 are affected by CVE-2011-1489.
How can I fix CVE-2011-1489?
To fix CVE-2011-1489, update rsyslog to version 5.7.6 or later.
- agent/type
- agent/remedy
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/rsyslog
- canonical/rsyslog rsyslog
- vendor/opensuse
- canonical/opensuse opensuse
- version/opensuse opensuse/11.4
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- package-manager/debian