CVE-2011-3200

Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
rsyslogrsyslog
4.6.0
rsyslogrsyslog
4.6.1
rsyslogrsyslog
4.6.2
rsyslogrsyslog
4.6.3
rsyslogrsyslog
4.6.4
rsyslogrsyslog
4.6.5
rsyslogrsyslog
4.6.6
rsyslogrsyslog
4.6.7
rsyslogrsyslog
5.2.0
rsyslogrsyslog
5.2.1
rsyslogrsyslog
5.2.2
rsyslogrsyslog
5.3.1
rsyslogrsyslog
5.3.2
rsyslogrsyslog
5.3.3
rsyslogrsyslog
5.3.4
rsyslogrsyslog
5.3.5
rsyslogrsyslog
5.3.6
rsyslogrsyslog
5.3.7
rsyslogrsyslog
5.4.0
rsyslogrsyslog
5.4.1
rsyslogrsyslog
5.4.2
rsyslogrsyslog
5.5.0
rsyslogrsyslog
5.5.1
rsyslogrsyslog
5.5.2
rsyslogrsyslog
5.5.3
rsyslogrsyslog
5.5.4
rsyslogrsyslog
5.5.5
rsyslogrsyslog
5.5.6
rsyslogrsyslog
5.5.7
rsyslogrsyslog
5.6.0
rsyslogrsyslog
5.6.1
rsyslogrsyslog
5.6.2
rsyslogrsyslog
5.6.3
rsyslogrsyslog
5.6.4
rsyslogrsyslog
5.6.5
rsyslogrsyslog
5.7.0
rsyslogrsyslog
5.7.1
rsyslogrsyslog
5.7.2
rsyslogrsyslog
5.7.3
rsyslogrsyslog
5.7.4
rsyslogrsyslog
5.7.5
rsyslogrsyslog
5.7.6
rsyslogrsyslog
5.7.7
rsyslogrsyslog
5.7.8
rsyslogrsyslog
5.7.9
rsyslogrsyslog
5.7.10
rsyslogrsyslog
5.8.0
rsyslogrsyslog
5.8.1
rsyslogrsyslog
5.8.2
rsyslogrsyslog
5.8.3
rsyslogrsyslog
5.8.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
rsyslog
bullseye (security)
8.2102.0-2+deb11u1
fixed
bullseye
8.2102.0-2+deb11u1
fixed
squeeze
no-dsa
lenny
no-dsa
bookworm
8.2302.0-1
fixed
sid
8.2410.0-1
fixed
trixie
8.2410.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rsyslog
natty
Fixed 4.6.4-2ubuntu4.1
released
maverick
not-affected
lucid
not-affected
hardy
not-affected