Every CVE Search/ Get API key

CVE-2011-4623

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in...

2.1 LowFix available

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Exploit likelihood

0.42%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
CVE-2011-4623
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
CVE-2011-4623
Updated
2026-11-02
EUVDEUVD-2011-4546 No score

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
EUVD-2011-4546
Updated
2026-11-03
GitHub AdvisoriesGHSA-j846-qfh4-5c92 No score

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in...

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
GHSA-j846-qfh4-5c92
Updated
2026-11-02
OSV No score

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
CVE-2011-4623
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4623 No score

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

Record
DEBIAN-CVE-2011-4623
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rsyslog
Debian:12
 before 5.7.4-1
5.7.4-1
rsyslog
Debian:13
 before 5.7.4-1
5.7.4-1
rsyslog
Debian:14
 before 5.7.4-1
5.7.4-1
rsyslog
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-mysql
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-pgsql
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-snmp
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gnutls
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gssapi
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
Show 25 moreShow less
Affected packages
PackageAffectedFixed
rsyslog-relp
Red Hat:enterprise_linux:6::client
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-mysql
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-pgsql
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-snmp
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gnutls
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gssapi
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-relp
Red Hat:enterprise_linux:6::computenode
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-snmp
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gnutls
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gssapi
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-mysql
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-pgsql
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-relp
Red Hat:enterprise_linux:6::server
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-snmp
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gnutls
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-gssapi
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-mysql
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-pgsql
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6
rsyslog-relp
Red Hat:enterprise_linux:6::workstation
 before 0:5.8.10-2.el6
0:5.8.10-2.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4623 is a low vulnerability (CVSS 2.1) in Rsyslog, published September 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in rsyslog 5.7.4-1.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open