CVE-2014-3634 in rsyslog
摘要 (英语)
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
预定
2014-05-14
披露
2014-11-01
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 67722 | rsyslog/sysklogd socket_iovec_alloc 内存损坏 | 119 | 未经证实 | 官方修复 | CVE-2014-3634 |