VULNERABILITY INTELLIGENCE

CVE-2011-1489

CVSS score5.5 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2019-11-14
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

Weakness classification

  • CWE-772: Missing Release of Resource after Effective Lifetime

Primary references