Read the docs
TI-2014-02955 Aliases CVE-2014-3634GHSA-h4gg-9gq4-7c4h

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote…

Priority MEDIUM 43CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 18 fixed, 3 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.

Why it matters now

EPSS 0.07546 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 3 advisoriesRed Hat: 18 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*up to 1.5VulnerableSysklogd Project
cpe:2.3:a:sysklogd_project:sysklogd:1.1:*:*:*:*:*:*:*1.1VulnerableSysklogd Project
cpe:2.3:a:sysklogd_project:sysklogd:1.2:*:*:*:*:*:*:*1.2VulnerableSysklogd Project
cpe:2.3:a:sysklogd_project:sysklogd:1.3:*:*:*:*:*:*:*1.3VulnerableSysklogd Project
cpe:2.3:a:sysklogd_project:sysklogd:1.4:*:*:*:*:*:*:*1.4VulnerableSysklogd Project
cpe:2.3:a:sysklogd_project:sysklogd:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableSysklogd Project
cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*up to 7.6.5Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:*8.1.0Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:*8.1.1Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:*8.1.2Vulnerablersyslog
  • cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:* Versions up to 1.5 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:sysklogd_project:sysklogd:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:sysklogd_project:sysklogd:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:sysklogd_project:sysklogd:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:sysklogd_project:sysklogd:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:sysklogd_project:sysklogd:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Sysklogd Project
  • cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:* Versions up to 7.6.5 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:* Versions 8.1.2 Vulnerable ·rsyslog
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:*8.1.3Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:*8.1.4Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:*8.1.5Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:*8.1.6Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:*8.2.0Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:*8.2.1Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.2.2:*:*:*:*:*:*:*8.2.2Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.2.3:*:*:*:*:*:*:*8.2.3Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.0:*:*:*:*:*:*:*8.3.0Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.1:*:*:*:*:*:*:*8.3.1Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.2:*:*:*:*:*:*:*8.3.2Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.3:*:*:*:*:*:*:*8.3.3Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.4:*:*:*:*:*:*:*8.3.4Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.3.5:*:*:*:*:*:*:*8.3.5Vulnerablersyslog
cpe:2.3:a:rsyslog:rsyslog:8.4.0:*:*:*:*:*:*:*8.4.0Vulnerablersyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:* Versions 8.1.3 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:* Versions 8.1.4 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:* Versions 8.1.5 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:* Versions 8.1.6 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.0:*:*:*:*:*:*:* Versions 8.3.0 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.1:*:*:*:*:*:*:* Versions 8.3.1 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.2:*:*:*:*:*:*:* Versions 8.3.2 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.3:*:*:*:*:*:*:* Versions 8.3.3 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.4:*:*:*:*:*:*:* Versions 8.3.4 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.3.5:*:*:*:*:*:*:* Versions 8.3.5 Vulnerable ·rsyslog
  • cpe:2.3:a:rsyslog:rsyslog:8.4.0:*:*:*:*:*:*:* Versions 8.4.0 Vulnerable ·rsyslog

Remediation

Red Hat 3 advisories

  • RHSA-2014:1671 Released 2014-10-20 · Red Hat rating Moderate
    rsyslog5 and rsyslog security update
    • Red Hat Enterprise Linux (v. 5 server) rsyslog5-5.8.12-5.el5_11, rsyslog5-5.8.12-5.el5_11.i386, rsyslog5-5.8.12-5.el5_11.ia64 +21
    • Red Hat Enterprise Linux Desktop (v. 5 client) rsyslog5-5.8.12-5.el5_11, rsyslog5-5.8.12-5.el5_11.i386, rsyslog5-gnutls-5.8.12-5.el5_11 +9
    • Red Hat Enterprise Linux Desktop (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-gnutls-5.8.10-9.el6_6, rsyslog-gssapi-5.8.10-9.el6_6 +1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-mysql-5.8.10-9.el6_6, rsyslog-pgsql-5.8.10-9.el6_6 +1
    • Red Hat Enterprise Linux HPC Node (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-gnutls-5.8.10-9.el6_6, rsyslog-gssapi-5.8.10-9.el6_6 +1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-mysql-5.8.10-9.el6_6, rsyslog-pgsql-5.8.10-9.el6_6 +1
    • Red Hat Enterprise Linux Server (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-gnutls-5.8.10-9.el6_6, rsyslog-gssapi-5.8.10-9.el6_6 +3
    • Red Hat Enterprise Linux Server Optional (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-snmp-5.8.10-9.el6_6
    • Red Hat Enterprise Linux Workstation (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-gnutls-5.8.10-9.el6_6, rsyslog-gssapi-5.8.10-9.el6_6 +3
    • Red Hat Enterprise Linux Workstation Optional (v. 6) rsyslog-5.8.10-9.el6_6, rsyslog-snmp-5.8.10-9.el6_6
  • RHSA-2014:1654 Released 2014-10-16 · Red Hat rating Important
    rsyslog7 security update
    • Red Hat Enterprise Linux Desktop (v. 6) rsyslog7-7.4.10-3.el6_6, rsyslog7-gnutls-7.4.10-3.el6_6, rsyslog7-gssapi-7.4.10-3.el6_6 +1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) rsyslog7-elasticsearch-7.4.10-3.el6_6, rsyslog7-mysql-7.4.10-3.el6_6, rsyslog7-pgsql-7.4.10-3.el6_6 +1
    • Red Hat Enterprise Linux HPC Node (v. 6) rsyslog7-7.4.10-3.el6_6, rsyslog7-gnutls-7.4.10-3.el6_6, rsyslog7-gssapi-7.4.10-3.el6_6 +1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) rsyslog7-elasticsearch-7.4.10-3.el6_6, rsyslog7-mysql-7.4.10-3.el6_6, rsyslog7-pgsql-7.4.10-3.el6_6 +1
    • Red Hat Enterprise Linux Server (v. 6) rsyslog7-7.4.10-3.el6_6, rsyslog7-gnutls-7.4.10-3.el6_6, rsyslog7-gssapi-7.4.10-3.el6_6 +3
    • Red Hat Enterprise Linux Server Optional (v. 6) rsyslog7-elasticsearch-7.4.10-3.el6_6, rsyslog7-snmp-7.4.10-3.el6_6
    • Red Hat Enterprise Linux Workstation (v. 6) rsyslog7-7.4.10-3.el6_6, rsyslog7-gnutls-7.4.10-3.el6_6, rsyslog7-gssapi-7.4.10-3.el6_6 +3
    • Red Hat Enterprise Linux Workstation Optional (v. 6) rsyslog7-elasticsearch-7.4.10-3.el6_6, rsyslog7-snmp-7.4.10-3.el6_6
  • RHSA-2014:1397 Released 2014-10-13 · Red Hat rating Important
    rsyslog security update
    • Red Hat Enterprise Linux Client (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +8
    • Red Hat Enterprise Linux ComputeNode (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +8
    • Red Hat Enterprise Linux Server (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +4
    • Red Hat Enterprise Linux Server Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +7
    • Red Hat Enterprise Linux Workstation (v. 7) rsyslog-7.4.7-7.el7_0, rsyslog-gnutls-7.4.7-7.el7_0, rsyslog-gssapi-7.4.7-7.el7_0 +4
    • Red Hat Enterprise Linux Workstation Optional (v. 7) rsyslog-crypto-7.4.7-7.el7_0, rsyslog-doc-7.4.7-7.el7_0, rsyslog-elasticsearch-7.4.7-7.el7_0 +6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat OpenShift Enterprise 2AffectedNo fix yet
Red Hat Storage 2AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2014:1671
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2014:1671
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2014:1397
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2014:1654, RHSA-2014:1671
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2014:1397

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3634
  2. 2026-10-03 Alias added: GHSA-h4gg-9gq4-7c4h

References

Exploit 1

Patch 1

Advisory 9

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences