CVE-2011-4623 [低] | Denial of Service（Rsyslog）

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

#	日期	舊 EPSS 分數	新 EPSS 分數	變化（新 − 舊）
1	2026-06-15	0.09%	0.42%	+0.33%
2	2025-03-17	0.04%	0.09%	+0.05%
3	2023-03-07	—	0.04%	—

日期

舊 EPSS 分數

新 EPSS 分數

變化（新 − 舊）

2026-06-15

0.09%

0.42%

+0.33%

2025-03-17

0.04%

0.09%

+0.05%

2023-03-07

—

0.04%

—

底座分	版本	嚴重度	向量	可利用性	影響	分數來源
2.1	2.0	LOW	`AV:L/AC:L/Au:N/C:N/I:N/A:P` 點擊展開存取路徑 (AV:L) 需本機登入或本機互動，僅遠端觸達不足以單獨完成利用。存取複雜度 (AC:L) 步驟短、路徑清楚，重現成本低。認證 (AU:N) 全程無需有效身分。機密性影響 (C:N) 對機密性無影響。完整性影響 (I:N) 對完整性無影響。可用性影響 (A:P) 可用性受到部分損害。	3.9	2.9	[email protected]

底座分

版本

嚴重度

向量

可利用性

影響

分數來源

2.1

2.0

LOW

AV:L/AC:L/Au:N/C:N/I:N/A:P 點擊展開

存取路徑 (AV:L): 需本機登入或本機互動，僅遠端觸達不足以單獨完成利用。
存取複雜度 (AC:L): 步驟短、路徑清楚，重現成本低。
認證 (AU:N): 全程無需有效身分。
機密性影響 (C:N): 對機密性無影響。
完整性影響 (I:N): 對完整性無影響。
可用性影響 (A:P): 可用性受到部分損害。

3.9

2.9

[email protected]

CVE-2011-4623 的 OS 追蹤

vendor	priority	summary	link
`debian`	not yet assigned	CVE-2011-4623 not yet assigned priority: Debian including 1 source packages (rsyslog), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2011-4623
`gentoo`	normal	CVE-2011-4623: 1 GLSA(s) (201412-35), 1 atom(s) (app-admin/rsyslog); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-4623
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2011-4623
`ubuntu`	medium	CVE-2011-4623 medium priority: Ubuntu including 1 source packages (rsyslog), 6 status rows across 6 suites (hardy, lucid, maverick, natty, oneiric, upstream): not-affected 4, released 2.	https://ubuntu.com/security/CVE-2011-4623

CVE-2011-4623 的影響軟體 / 設定

廠商	產品	版本	原始 CPE
rsyslog	rsyslog	4.1.0	cpe:2.3:a:rsyslog:rsyslog:4.1.0:::::::*
rsyslog	rsyslog	4.1.1	cpe:2.3:a:rsyslog:rsyslog:4.1.1:::::::*
rsyslog	rsyslog	4.1.2	cpe:2.3:a:rsyslog:rsyslog:4.1.2:::::::*
rsyslog	rsyslog	4.1.3	cpe:2.3:a:rsyslog:rsyslog:4.1.3:::::::*
rsyslog	rsyslog	4.1.4	cpe:2.3:a:rsyslog:rsyslog:4.1.4:::::::*
rsyslog	rsyslog	4.1.5	cpe:2.3:a:rsyslog:rsyslog:4.1.5:::::::*
rsyslog	rsyslog	4.1.6	cpe:2.3:a:rsyslog:rsyslog:4.1.6:::::::*
rsyslog	rsyslog	4.1.7	cpe:2.3:a:rsyslog:rsyslog:4.1.7:::::::*
rsyslog	rsyslog	4.2.0	cpe:2.3:a:rsyslog:rsyslog:4.2.0:::::::*
rsyslog	rsyslog	4.3.0	cpe:2.3:a:rsyslog:rsyslog:4.3.0:::::::*
rsyslog	rsyslog	4.3.1	cpe:2.3:a:rsyslog:rsyslog:4.3.1:::::::*
rsyslog	rsyslog	4.3.2	cpe:2.3:a:rsyslog:rsyslog:4.3.2:::::::*
rsyslog	rsyslog	4.4.0	cpe:2.3:a:rsyslog:rsyslog:4.4.0:::::::*
rsyslog	rsyslog	4.4.1	cpe:2.3:a:rsyslog:rsyslog:4.4.1:::::::*
rsyslog	rsyslog	4.4.2	cpe:2.3:a:rsyslog:rsyslog:4.4.2:::::::*
rsyslog	rsyslog	4.5.0	cpe:2.3:a:rsyslog:rsyslog:4.5.0:::::::*
rsyslog	rsyslog	4.5.1	cpe:2.3:a:rsyslog:rsyslog:4.5.1:::::::*
rsyslog	rsyslog	4.5.2	cpe:2.3:a:rsyslog:rsyslog:4.5.2:::::::*
rsyslog	rsyslog	4.5.3	cpe:2.3:a:rsyslog:rsyslog:4.5.3:::::::*
rsyslog	rsyslog	4.5.4	cpe:2.3:a:rsyslog:rsyslog:4.5.4:::::::*
rsyslog	rsyslog	4.5.5	cpe:2.3:a:rsyslog:rsyslog:4.5.5:::::::*
rsyslog	rsyslog	4.5.6	cpe:2.3:a:rsyslog:rsyslog:4.5.6:::::::*
rsyslog	rsyslog	4.5.7	cpe:2.3:a:rsyslog:rsyslog:4.5.7:::::::*
rsyslog	rsyslog	4.5.8	cpe:2.3:a:rsyslog:rsyslog:4.5.8:::::::*
rsyslog	rsyslog	4.6.0	cpe:2.3:a:rsyslog:rsyslog:4.6.0:::::::*
rsyslog	rsyslog	4.6.1	cpe:2.3:a:rsyslog:rsyslog:4.6.1:::::::*
rsyslog	rsyslog	4.6.2	cpe:2.3:a:rsyslog:rsyslog:4.6.2:::::::*
rsyslog	rsyslog	4.6.3	cpe:2.3:a:rsyslog:rsyslog:4.6.3:::::::*
rsyslog	rsyslog	4.6.4	cpe:2.3:a:rsyslog:rsyslog:4.6.4:::::::*
rsyslog	rsyslog	4.6.5	cpe:2.3:a:rsyslog:rsyslog:4.6.5:::::::*
rsyslog	rsyslog	5.1.0	cpe:2.3:a:rsyslog:rsyslog:5.1.0:::::::*
rsyslog	rsyslog	5.1.1	cpe:2.3:a:rsyslog:rsyslog:5.1.1:::::::*
rsyslog	rsyslog	5.1.2	cpe:2.3:a:rsyslog:rsyslog:5.1.2:::::::*
rsyslog	rsyslog	5.1.3	cpe:2.3:a:rsyslog:rsyslog:5.1.3:::::::*
rsyslog	rsyslog	5.1.4	cpe:2.3:a:rsyslog:rsyslog:5.1.4:::::::*
rsyslog	rsyslog	5.1.5	cpe:2.3:a:rsyslog:rsyslog:5.1.5:::::::*
rsyslog	rsyslog	5.1.6	cpe:2.3:a:rsyslog:rsyslog:5.1.6:::::::*
rsyslog	rsyslog	5.2.0	cpe:2.3:a:rsyslog:rsyslog:5.2.0:::::::*
rsyslog	rsyslog	5.2.1	cpe:2.3:a:rsyslog:rsyslog:5.2.1:::::::*
rsyslog	rsyslog	5.2.2	cpe:2.3:a:rsyslog:rsyslog:5.2.2:::::::*
rsyslog	rsyslog	5.3.1	cpe:2.3:a:rsyslog:rsyslog:5.3.1:::::::*
rsyslog	rsyslog	5.3.2	cpe:2.3:a:rsyslog:rsyslog:5.3.2:::::::*
rsyslog	rsyslog	5.3.3	cpe:2.3:a:rsyslog:rsyslog:5.3.3:::::::*
rsyslog	rsyslog	5.3.4	cpe:2.3:a:rsyslog:rsyslog:5.3.4:::::::*
rsyslog	rsyslog	5.3.5	cpe:2.3:a:rsyslog:rsyslog:5.3.5:::::::*
rsyslog	rsyslog	5.3.6	cpe:2.3:a:rsyslog:rsyslog:5.3.6:::::::*
rsyslog	rsyslog	5.3.7	cpe:2.3:a:rsyslog:rsyslog:5.3.7:::::::*
rsyslog	rsyslog	5.4.0	cpe:2.3:a:rsyslog:rsyslog:5.4.0:::::::*
rsyslog	rsyslog	5.4.1	cpe:2.3:a:rsyslog:rsyslog:5.4.1:::::::*
rsyslog	rsyslog	5.4.2	cpe:2.3:a:rsyslog:rsyslog:5.4.2:::::::*
rsyslog	rsyslog	5.5.0	cpe:2.3:a:rsyslog:rsyslog:5.5.0:::::::*
rsyslog	rsyslog	5.5.1	cpe:2.3:a:rsyslog:rsyslog:5.5.1:::::::*
rsyslog	rsyslog	5.5.2	cpe:2.3:a:rsyslog:rsyslog:5.5.2:::::::*
rsyslog	rsyslog	5.5.3	cpe:2.3:a:rsyslog:rsyslog:5.5.3:::::::*
rsyslog	rsyslog	5.5.4	cpe:2.3:a:rsyslog:rsyslog:5.5.4:::::::*
rsyslog	rsyslog	5.5.5	cpe:2.3:a:rsyslog:rsyslog:5.5.5:::::::*
rsyslog	rsyslog	5.5.6	cpe:2.3:a:rsyslog:rsyslog:5.5.6:::::::*
rsyslog	rsyslog	5.5.7	cpe:2.3:a:rsyslog:rsyslog:5.5.7:::::::*
rsyslog	rsyslog	5.6.0	cpe:2.3:a:rsyslog:rsyslog:5.6.0:::::::*
rsyslog	rsyslog	5.6.1	cpe:2.3:a:rsyslog:rsyslog:5.6.1:::::::*
rsyslog	rsyslog	5.6.2	cpe:2.3:a:rsyslog:rsyslog:5.6.2:::::::*
rsyslog	rsyslog	5.6.3	cpe:2.3:a:rsyslog:rsyslog:5.6.3:::::::*
rsyslog	rsyslog	5.6.4	cpe:2.3:a:rsyslog:rsyslog:5.6.4:::::::*
rsyslog	rsyslog	5.6.5	cpe:2.3:a:rsyslog:rsyslog:5.6.5:::::::*
rsyslog	rsyslog	5.7.0	cpe:2.3:a:rsyslog:rsyslog:5.7.0:::::::*
rsyslog	rsyslog	5.7.1	cpe:2.3:a:rsyslog:rsyslog:5.7.1:::::::*
rsyslog	rsyslog	5.7.2	cpe:2.3:a:rsyslog:rsyslog:5.7.2:::::::*
rsyslog	rsyslog	5.7.3	cpe:2.3:a:rsyslog:rsyslog:5.7.3:::::::*
rsyslog	rsyslog	6.1.0	cpe:2.3:a:rsyslog:rsyslog:6.1.0:::::::*
rsyslog	rsyslog	6.1.1	cpe:2.3:a:rsyslog:rsyslog:6.1.1:::::::*
rsyslog	rsyslog	6.1.2	cpe:2.3:a:rsyslog:rsyslog:6.1.2:::::::*
rsyslog	rsyslog	6.1.3	cpe:2.3:a:rsyslog:rsyslog:6.1.3:::::::*

CVE-2011-4623 的參考連結

URL	標籤
http://bugzilla.adiscon.com/show_bug.cgi?id=221
http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=6bad782f154b7f838c7371bf99c13f6dc4ec4101
http://rsyslog.com/changelog-for-4-6-6-v4-stable/
http://rsyslog.com/changelog-for-5-7-4-v5-beta/
http://rsyslog.com/changelog-for-6-1-4-devel/
http://secunia.com/advisories/45848	Vendor Advisory
http://secunia.com/advisories/47698	Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/12/22/2
http://www.securityfocus.com/bid/51171
http://www.securitytracker.com/id?1026556
http://www.ubuntu.com/usn/USN-1338-1	Patch Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=769822

URL

標籤

http://bugzilla.adiscon.com/show_bug.cgi?id=221

http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=6bad782f154b7f838c7371bf99c13f6dc4ec4101

http://rsyslog.com/changelog-for-4-6-6-v4-stable/

http://rsyslog.com/changelog-for-5-7-4-v5-beta/

http://rsyslog.com/changelog-for-6-1-4-devel/

http://secunia.com/advisories/45848

Vendor Advisory

http://secunia.com/advisories/47698

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/12/22/2