RSYSLOG: Denial of Service

RSYSLOG: Denial of Service Multiple vulnerabilities have been found in RSYSLOG, allowing attackers to cause Denial of Service. rsyslog 2014-12-24 2014-12-24: 1 395709 491856 524058 524290 local, remote 8.4.2 8.4.2

RSYSLOG is an enhanced multi-threaded syslogd with database support and more.

Multiple vulnerabilities have been discovered in RSYSLOG. Please review the CVE identifiers referenced below for details.

A context-dependent attacker may be able to create a Denial of Service condition.

There is no known workaround at this time.

All RSYSLOG users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-admin/rsyslog-8.4.2"

CVE-2011-4623 CVE-2014-3634 CVE-2014-3683 ackle ackle