Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2011-4623
Description:Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.
Test IDs: 1.3.6.1.4.1.25623.1.0.71069   1.3.6.1.4.1.25623.1.0.71406   1.3.6.1.4.1.25623.1.0.71454   1.3.6.1.4.1.25623.1.0.72357   1.3.6.1.4.1.25623.1.0.123881   1.3.6.1.4.1.25623.1.0.881131   1.3.6.1.4.1.25623.1.0.870769   1.3.6.1.4.1.25623.1.0.831691   1.3.6.1.4.1.25623.1.0.120268   1.3.6.1.4.1.25623.1.0.840877  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-4623
BugTraq ID: 51171
http://www.securityfocus.com/bid/51171
https://bugzilla.redhat.com/show_bug.cgi?id=769822
http://www.openwall.com/lists/oss-security/2011/12/22/2
http://www.securitytracker.com/id?1026556
http://secunia.com/advisories/45848
http://secunia.com/advisories/47698
http://www.ubuntu.com/usn/USN-1338-1




© 1998-2021 E-Soft Inc. All rights reserved.