CVE-2011-3200

Published: 6 September 2011

Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.

Notes

On i386 and amd64 it seems to just truncate messages slightly and
not be a DoS. Will patch anyway just in case for other architectures.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3200
• https://ubuntu.com/security/notices/USN-1224-1
• NVD
• Launchpad
• Debian