CVE-2014-3634: Buffer Overflow
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3634?
CVE-2014-3634 has a moderate severity level due to its potential to cause denial of service and possibly execute arbitrary code.
How do I fix CVE-2014-3634?
To fix CVE-2014-3634, upgrade to rsyslog version 7.6.6 or later, or version 8.4.1 or later, and ensure sysklogd is updated past version 1.5.
What types of attacks can CVE-2014-3634 allow?
CVE-2014-3634 can allow remote attackers to cause denial of service or potentially execute arbitrary code through a crafted priority value.
Which software is affected by CVE-2014-3634?
CVE-2014-3634 affects rsyslog versions prior to 7.6.6 and 8.x before 8.4.1, as well as sysklogd versions 1.5 and earlier.
What is the impact of CVE-2014-3634?
The impact of CVE-2014-3634 includes possible crashes of the logging service and risks of executing unauthorized code.