Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3634
HistoryOct 01, 2014 - 12:00 a.m.

CVE-2014-3634

2014-10-0100:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.228 Low

EPSS

Percentile

96.5%

JSON

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier
allows remote attackers to cause a denial of service (crash), possibly
execute arbitrary code, or have other unspecified impact via a crafted
priority (PRI) value that triggers an out-of-bounds array access.

Notes

Author Note
mdeslaur also see followup issue CVE-2014-3683
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrsyslog< 4.2.0-2ubuntu8.3UNKNOWN
ubuntu12.04noarchrsyslog< 5.8.6-1ubuntu8.9UNKNOWN
ubuntu14.04noarchrsyslog< 7.4.4-1ubuntu2.3UNKNOWN
ubuntu14.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu15.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu15.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu16.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu16.10noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN
ubuntu17.04noarchrsyslog< 7.4.4-1ubuntu11UNKNOWN

Related

nessus 36
openvas 23
osv 4
altlinux 1
debian 3
ubuntu 1
cvelist 2
securityvulns 2
debiancve 2
suse 1
cve 3
ibm 2
nvd 3
aix 1
prion 3
ubuntucve 1
gentoo 1
checkpoint_advisories 1
archlinux 2
amazon 3
oraclelinux 3
veracode 1
redhat 3
fedora 5
freebsd 1
f5 1
mageia 1
centos 3
nessus
nessus
Mandriva Linux Security Advisory : rsyslog (MDVSA-2014:196)
2014-10-22 00:00:00
Ubuntu 14.04 LTS : Rsyslog vulnerabilities (USN-2381-1)
2014-10-11 00:00:00
AIX rsyslog Advisory : rsyslog_advisory.asc
2014-12-02 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2381-1)
2014-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1438-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2014-0411)
2022-01-28 00:00:00
osv
osv
rsyslog - security update
2014-10-08 00:00:00
rsyslog - security update
2014-10-19 00:00:00
rsyslog - regression update
2014-10-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1
2014-10-13 00:00:00
debian
debian
[SECURITY] [DSA 3047-1] rsyslog security update
2014-10-08 11:09:01
[SECURITY] [DLA 72-1] rsylog security update
2014-10-19 16:52:50
[SECURITY] [DSA 3040-1] rsyslog security update
2014-09-30 21:13:13
ubuntu
ubuntu
Rsyslog vulnerabilities
2014-10-09 00:00:00
cvelist
cvelist
CVE-2014-3683
2014-11-02 00:00:00
CVE-2014-3634
2014-11-02 00:00:00
securityvulns
securityvulns
rsyslog DoS
2014-10-05 00:00:00
[SECURITY] [DSA 3040-1] rsyslog security update
2014-10-05 00:00:00
debiancve
debiancve
CVE-2014-3683
2014-11-02 00:55:05
CVE-2014-3634
2014-11-02 00:55:05
suse
suse
Security update for rsyslog (important)
2014-10-15 00:04:46
cve
cve
CVE-2014-3683
2014-11-02 00:55:05
CVE-2014-3634
2014-11-02 00:55:05
CVE-2014-6388
2014-10-13 18:55:01
ibm
ibm
Security Bulletin: Multiple vulnerabilities in rsyslog affect IBM Flex System Manager (FSM): (CVE-2014-3634 and CVE-2014-3683)
2019-01-31 01:45:01
Security Bulletin: Vulnerability in rsyslog affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3634)
2018-06-17 22:30:12
nvd
nvd
CVE-2014-3683
2014-11-02 00:55:05
CVE-2014-3634
2014-11-02 00:55:05
CVE-2014-6388
2014-10-13 18:55:01
aix
aix
Open Source RSyslog vulnerability
2014-11-14 15:31:13
prion
prion
Integer overflow
2014-11-02 00:55:00
Out-of-bounds
2014-11-02 00:55:00
Design/Logic Flaw
2014-10-13 18:55:00
ubuntucve
ubuntucve
CVE-2014-3683
2014-10-02 00:00:00
gentoo
gentoo
RSYSLOG: Denial of service
2014-12-24 00:00:00
checkpoint_advisories
checkpoint_advisories
RSYSLOG PRI Value Parsing Integer Overflow Denial of Service (CVE-2014-3683)
2014-12-02 00:00:00
archlinux
archlinux
rsyslog: remote denial of service
2014-10-08 00:00:00
rsyslog: remote denial of service
2014-10-01 00:00:00
amazon
amazon
Medium: rsyslog
2014-11-11 10:26:00
Important: rsyslog
2022-05-31 23:47:00
Important: rsyslog
2022-05-31 23:50:00
oraclelinux
oraclelinux
rsyslog security update
2014-10-13 00:00:00
rsyslog5 and rsyslog security update
2014-10-20 00:00:00
rsyslog7 security update
2014-10-21 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:02:37
redhat
redhat
(RHSA-2014:1397) Important: rsyslog security update
2014-10-13 00:00:00
(RHSA-2014:1671) Moderate: rsyslog5 and rsyslog security update
2014-10-20 00:00:00
(RHSA-2014:1654) Important: rsyslog7 security update
2014-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rsyslog-7.4.8-2.fc20
2014-10-16 02:02:22
[SECURITY] Fedora 19 Update: sysklogd-1.5-18.fc19
2014-10-27 03:28:59
[SECURITY] Fedora 21 Update: rsyslog-7.4.10-5.fc21
2014-10-16 01:59:57
freebsd
freebsd
rsyslog -- remote syslog PRI vulnerability
2014-09-30 00:00:00
f5
f5
K42903299 : rsyslog: remote syslog PRI vulnerability CVE-2014-3634
2017-07-06 00:00:00
mageia
mageia
Updated rsyslog packages fix CVE-2014-3634
2014-10-09 18:39:32
centos
centos
rsyslog7 security update
2014-10-20 18:15:12
rsyslog security update
2014-10-13 19:45:27
rsyslog, rsyslog5 security update
2014-10-21 15:10:11

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.228 Low

EPSS

Percentile

96.5%

JSON
Related for UB:CVE-2014-3634
nessus36openvas23osv4altlinux1debian3ubuntu1cvelist2securityvulns2debiancve2suse1cve3ibm2nvd3aix1prion3ubuntucve1gentoo1checkpoint_advisories1archlinux2amazon3oraclelinux3veracode1redhat3fedora5freebsd1f51mageia1centos3