CVE-2011-4623
CVE-2011-4623 is a low-severity vulnerability in Rsyslog with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 0% (34th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-189
- Affected product: Rsyslog
- Published:
- Last modified:
Description
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.
Frequently asked questions
- What is CVE-2011-4623?
- Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.
- How severe is CVE-2011-4623?
- CVE-2011-4623 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2011-4623 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2011-4623?
- CVE-2011-4623 primarily affects Rsyslog. In total, 72 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2011-4623?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2011-4623 published?
- CVE-2011-4623 was published on 2012-09-25 and last updated on 2026-06-16.
References
- http://bugzilla.adiscon.com/show_bug.cgi?id=221
- http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=6bad782f154b7f838c7371bf99c13f6dc4ec4101
- http://rsyslog.com/changelog-for-4-6-6-v4-stable/
- http://rsyslog.com/changelog-for-5-7-4-v5-beta/
- http://rsyslog.com/changelog-for-6-1-4-devel/
- http://secunia.com/advisories/45848
- http://secunia.com/advisories/47698
- http://www.openwall.com/lists/oss-security/2011/12/22/2
- http://www.securityfocus.com/bid/51171
- http://www.securitytracker.com/id?1026556
- http://www.ubuntu.com/usn/USN-1338-1
- https://bugzilla.redhat.com/show_bug.cgi?id=769822
Affected products (72)
- cpe:2.3:a:rsyslog:rsyslog:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:4.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:5.2.2:*:*:*:*:*:*:*
More vulnerabilities in Rsyslog
- CVE-2019-17042 — Critical (CVSS 9.8): An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for…
- CVE-2019-17041 — Critical (CVSS 9.8): An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in…
- CVE-2019-17040 — Critical (CVSS 9.8): contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
- CVE-2017-12588 — Critical (CVSS 9.8): The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly…
- CVE-2008-5617 — High (CVSS 8.5): The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows…
- CVE-2022-24903 — High (CVSS 8.1): Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer…
Other CWE-189 (Numeric Errors) vulnerabilities
- CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
- CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
- CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
- CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
- CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
- CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…