CVE-2013-4758: Double Free
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4758?
CVE-2013-4758 is classified as a critical vulnerability due to its potential to cause denial of service and possibly allow remote code execution.
How do I fix CVE-2013-4758?
To mitigate CVE-2013-4758, upgrade to rsyslog version 7.4.2 or later for stable releases, or 7.5.2 or later for development releases.
What is the impact of CVE-2013-4758?
The impact of CVE-2013-4758 includes crashing the application and potentially executing arbitrary code if exploited.
Which versions of rsyslog are affected by CVE-2013-4758?
CVE-2013-4758 affects rsyslog versions prior to 7.4.2 and prior to 7.5.2 in development.
Can CVE-2013-4758 be exploited remotely?
Yes, CVE-2013-4758 can be exploited remotely, allowing attackers to cause a denial of service.