Updated rsyslog packages fix CVE-2014-3634

2014-10-0918:39:32

Gentoo Foundation

advisories.mageia.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.228

Percentile

96.5%

JSON

Updated rsyslog packages fix security vulnerability: Rainer Gerhards, the rsyslog project leader, reported a vulnerability in Rsyslog. As a consequence of this vulnerability an attacker can send malformed messages to a server, if this one accepts data from untrusted sources, and trigger a denial of service attack (CVE-2014-3634).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchrsyslog< 5.10.1-2.2rsyslog-5.10.1-2.2.mga3
Mageia4noarchrsyslog< 5.10.1-3.2rsyslog-5.10.1-3.2.mga4