VULNERABILITY INTELLIGENCE
CVE-2013-4758
CVSS score6.8 MEDIUM
EPSS probability2.33%
CISA KEVNot currently listed
Published2013-10-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.