Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 11.04 USN-1224-1 Critical: Rsyslog Denial Of Service Risk

ubuntu
Calendar Grey October 3, 2011
Scroller Ubuntu
The rsyslog flaw found in Ubuntu version 11.04 can be manipulated to trigger a program failure. Ensure you update rsyslog to protect your system.
Rsyslog could be made to crash if it processed a specially crafted message.

Summary

Rsyslog could be made to crash if it processed a specially crafted message.

Software Description:

- rsyslog: enhanced multi-threaded syslogd

Details:

It was discovered that rsyslog had an off-by-two error when parsing legacy

syslog messages. An attacker could potentially exploit this to cause a

denial of service via application crash.

Topics%20covered

Topics Covered

security advisory denial of service application crash ubuntu rsyslog

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  rsyslog                         4.6.4-2ubuntu4.1

In general, a standard system update will make all the necessary changes.

References

CVE-2011-3200

Severity
critical
Lowest
Low
Medium
High
Critical

October 03, 2011

Topics%20covered

Topics Covered

security advisory denial of service application crash ubuntu rsyslog

Package Information

https://launchpad.net/ubuntu/+source/rsyslog/4.6.4-2ubuntu4.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.