CVE-2011-4623

Published: Sep 25, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Affected (72)

Products: Rsyslog: Rsyslog

Rsyslog

1 product

Rsyslog

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Rsyslog Rsyslog	Version 4.1.0
Rsyslog Rsyslog	Version 4.1.1
Rsyslog Rsyslog	Version 4.1.2
Rsyslog Rsyslog	Version 4.1.3
Rsyslog Rsyslog	Version 4.1.4
Rsyslog Rsyslog	Version 4.1.5
Rsyslog Rsyslog	Version 4.1.6
Rsyslog Rsyslog	Version 4.1.7
Rsyslog Rsyslog	Version 4.2.0
Rsyslog Rsyslog	Version 4.3.0
Rsyslog Rsyslog	Version 4.3.1
Rsyslog Rsyslog	Version 4.3.2
Rsyslog Rsyslog	Version 4.4.0
Rsyslog Rsyslog	Version 4.4.1
Rsyslog Rsyslog	Version 4.4.2
Rsyslog Rsyslog	Version 4.5.0
Rsyslog Rsyslog	Version 4.5.1
Rsyslog Rsyslog	Version 4.5.2
Rsyslog Rsyslog	Version 4.5.3
Rsyslog Rsyslog	Version 4.5.4
Rsyslog Rsyslog	Version 4.5.5
Rsyslog Rsyslog	Version 4.5.6
Rsyslog Rsyslog	Version 4.5.7
Rsyslog Rsyslog	Version 4.5.8
Rsyslog Rsyslog	Version 4.6.0
Rsyslog Rsyslog	Version 4.6.1
Rsyslog Rsyslog	Version 4.6.2
Rsyslog Rsyslog	Version 4.6.3
Rsyslog Rsyslog	Version 4.6.4
Rsyslog Rsyslog	Version 4.6.5

Configuration B

38 vulnerable

Vulnerable Software	Affected Versions
Rsyslog Rsyslog	Version 5.1.0
Rsyslog Rsyslog	Version 5.1.1
Rsyslog Rsyslog	Version 5.1.2
Rsyslog Rsyslog	Version 5.1.3
Rsyslog Rsyslog	Version 5.1.4
Rsyslog Rsyslog	Version 5.1.5
Rsyslog Rsyslog	Version 5.1.6
Rsyslog Rsyslog	Version 5.2.0
Rsyslog Rsyslog	Version 5.2.1
Rsyslog Rsyslog	Version 5.2.2
Rsyslog Rsyslog	Version 5.3.1
Rsyslog Rsyslog	Version 5.3.2
Rsyslog Rsyslog	Version 5.3.3
Rsyslog Rsyslog	Version 5.3.4
Rsyslog Rsyslog	Version 5.3.5
Rsyslog Rsyslog	Version 5.3.6
Rsyslog Rsyslog	Version 5.3.7
Rsyslog Rsyslog	Version 5.4.0
Rsyslog Rsyslog	Version 5.4.1
Rsyslog Rsyslog	Version 5.4.2
Rsyslog Rsyslog	Version 5.5.0
Rsyslog Rsyslog	Version 5.5.1
Rsyslog Rsyslog	Version 5.5.2
Rsyslog Rsyslog	Version 5.5.3
Rsyslog Rsyslog	Version 5.5.4
Rsyslog Rsyslog	Version 5.5.5
Rsyslog Rsyslog	Version 5.5.6
Rsyslog Rsyslog	Version 5.5.7
Rsyslog Rsyslog	Version 5.6.0
Rsyslog Rsyslog	Version 5.6.1
Rsyslog Rsyslog	Version 5.6.2
Rsyslog Rsyslog	Version 5.6.3
Rsyslog Rsyslog	Version 5.6.4
Rsyslog Rsyslog	Version 5.6.5
Rsyslog Rsyslog	Version 5.7.0
Rsyslog Rsyslog	Version 5.7.1
Rsyslog Rsyslog	Version 5.7.2
Rsyslog Rsyslog	Version 5.7.3