Test ID:	1.3.6.1.4.1.25623.1.1.1.2.2014.72
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-72-1)
Summary:	The remote host is missing an update for the Debian 'rsyslog' package(s) announced via the DLA-72-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'rsyslog' package(s) announced via the DLA-72-1 advisory. Vulnerability Insight: The Wheezy patch left an unresolved symbol in the imklog module of the Squeeze version. rsyslog worked fine except that messages from the kernel couldn't be submitted any longer. This update fixes this issue. For reference, the original advisory text follows. CVE-2014-3634 Fix remote syslog vulnerability due to improper handling of invalid PRI values. CVE-2014-3683 Followup fix for CVE-2014-3634. The initial patch was incomplete. It did not cover cases where PRI values > MAX_INT caused integer overflows resulting in negative values. For Debian 6 Squeeze, these issues have been fixed in rsyslog version 4.6.4-2+deb6u2 Affected Software/OS: 'rsyslog' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3634 Debian Security Information: DSA-3040 (Google Search) http://www.debian.org/security/2014/dsa-3040 http://www.mandriva.com/security/advisories?name=MDVSA-2015:130 http://www.openwall.com/lists/oss-security/2014/09/30/15 http://www.openwall.com/lists/oss-security/2014/10/03/1 RedHat Security Advisories: RHSA-2014:1397 http://rhn.redhat.com/errata/RHSA-2014-1397.html RedHat Security Advisories: RHSA-2014:1654 http://rhn.redhat.com/errata/RHSA-2014-1654.html RedHat Security Advisories: RHSA-2014:1671 http://rhn.redhat.com/errata/RHSA-2014-1671.html http://secunia.com/advisories/61494 http://secunia.com/advisories/61720 http://secunia.com/advisories/61930 SuSE Security Announcement: SUSE-SU-2014:1294 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html SuSE Security Announcement: openSUSE-SU-2014:1297 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html SuSE Security Announcement: openSUSE-SU-2014:1298 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html http://www.ubuntu.com/usn/USN-2381-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-3683 Debian Security Information: DSA-3047 (Google Search) http://www.debian.org/security/2014/dsa-3047
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.