CVE-2014-3634

Exp

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.

Published: 2014-11-02 Last update: 2026-05-06 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2014-3634 is rated High Exploit Risk (82.7/100): CVSS High severity, with high exploitation likelihood (EPSS 29.38%, 96th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +3.91% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2014-3634

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2014-3634

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-12-11 25.47% 29.38% +3.91%
2 2025-10-22 29.38% 25.47% -3.91%
3 2025-09-13 29.38%

Full EPSS history (22 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2014-3634

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 6.4 [email protected]

Weakness enumeration for CVE-2014-3634

OS Trackers for CVE-2014-3634

vendor priority summary link
debian not yet assigned CVE-2014-3634 not yet assigned priority: Debian including 2 source packages (inetutils, rsyslog), 10 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 10. https://security-tracker.debian.org/tracker/CVE-2014-3634
gentoo normal CVE-2014-3634: 1 GLSA(s) (201412-35), 1 atom(s) (app-admin/rsyslog); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2014-3634
redhat high https://access.redhat.com/security/cve/CVE-2014-3634
suse high CVE-2014-3634 severity important: SUSE including 148 source package names (klogd-1.4.1-786.3, klogd-1.4.1-lp150.2.4, …), 397 product×package rows across 44 product lines (HPE Helion OpenStack 8, SUSE Liberty Linux 7, … (44 product lines)): Fixed 227, Known Not Affected 170. https://www.suse.com/security/cve/CVE-2014-3634/
ubuntu medium CVE-2014-3634 medium priority: Ubuntu including 2 source packages (rsyslog, sysklogd), 20 status rows across 10 suites (lucid, precise, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): released 10, DNE 7, ignored 2, needs-triage 1. https://ubuntu.com/security/CVE-2014-3634

Affected software / configurations for CVE-2014-3634

Vendor Product Version Raw CPE
sysklogd_project sysklogd <= 1.5 cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*
sysklogd_project sysklogd 1.1 cpe:2.3:a:sysklogd_project:sysklogd:1.1:*:*:*:*:*:*:*
sysklogd_project sysklogd 1.2 cpe:2.3:a:sysklogd_project:sysklogd:1.2:*:*:*:*:*:*:*
sysklogd_project sysklogd 1.3 cpe:2.3:a:sysklogd_project:sysklogd:1.3:*:*:*:*:*:*:*
sysklogd_project sysklogd 1.4 cpe:2.3:a:sysklogd_project:sysklogd:1.4:*:*:*:*:*:*:*
sysklogd_project sysklogd 1.4.1 cpe:2.3:a:sysklogd_project:sysklogd:1.4.1:*:*:*:*:*:*:*
rsyslog rsyslog <= 7.6.5 cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.0 cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.1 cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.2 cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.3 cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.4 cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.5 cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:*
rsyslog rsyslog 8.1.6 cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:*
rsyslog rsyslog 8.2.0 cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:*
rsyslog rsyslog 8.2.1 cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:*
rsyslog rsyslog 8.2.2 cpe:2.3:a:rsyslog:rsyslog:8.2.2:*:*:*:*:*:*:*
rsyslog rsyslog 8.2.3 cpe:2.3:a:rsyslog:rsyslog:8.2.3:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.0 cpe:2.3:a:rsyslog:rsyslog:8.3.0:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.1 cpe:2.3:a:rsyslog:rsyslog:8.3.1:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.2 cpe:2.3:a:rsyslog:rsyslog:8.3.2:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.3 cpe:2.3:a:rsyslog:rsyslog:8.3.3:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.4 cpe:2.3:a:rsyslog:rsyslog:8.3.4:*:*:*:*:*:*:*
rsyslog rsyslog 8.3.5 cpe:2.3:a:rsyslog:rsyslog:8.3.5:*:*:*:*:*:*:*
rsyslog rsyslog 8.4.0 cpe:2.3:a:rsyslog:rsyslog:8.4.0:*:*:*:*:*:*:*

References for CVE-2014-3634

URL Tags
http://advisories.mageia.org/MGASA-2014-0411.html
http://linux.oracle.com/errata/ELSA-2014-1654
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html
http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html
http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html
http://rhn.redhat.com/errata/RHSA-2014-1397.html
http://rhn.redhat.com/errata/RHSA-2014-1654.html
http://rhn.redhat.com/errata/RHSA-2014-1671.html
http://secunia.com/advisories/61494
http://secunia.com/advisories/61720
http://secunia.com/advisories/61930
http://www.debian.org/security/2014/dsa-3040
http://www.mandriva.com/security/advisories?name=MDVSA-2015:130
http://www.openwall.com/lists/oss-security/2014/09/30/15
http://www.openwall.com/lists/oss-security/2014/10/03/1 Patch
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
http://www.rsyslog.com/remote-syslog-pri-vulnerability/ Exploit Patch Vendor Advisory
http://www.ubuntu.com/usn/USN-2381-1
cvelogic Threat Intelligence