Red Hat Security AdvisoryRHSA-2014:1397
rsyslog security update
Released 2014-10-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +2
- Red Hat Enterprise Linux Client Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +8
- Red Hat Enterprise Linux Server (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +4
- Red Hat Enterprise Linux Server Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +7
- Red Hat Enterprise Linux Workstation (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +6
Fixes 1 record
Priority MEDIUM 43
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priorit…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07546 · Published 2014-11-02 · Partial fix CWE-119
