CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain...
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
CVE-2015-3243- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
CVE List No score
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
CVE-2015-3243- Updated
- 2026-11-02
EUVDEUVD-2015-3298 No score
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
EUVD-2015-3298- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mg7r-rgfr-mmj9
rsyslog uses weak permissions for generating log files, which allows local users to obtain...
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
GHSA-mg7r-rgfr-mmj9- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
OSV
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
CVE-2015-3243- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3243
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
- Record
DEBIAN-CVE-2015-3243- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:11309-1 No score
rsyslog-8.2106.0-1.2 on GA media
These are all security issues fixed in the rsyslog-8.2106.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11309-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:1937-1 No score
Security update for rsyslog
This update for rsyslog fixes the following security issue:
- CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393).
- Record
SUSE-SU-2018:1937-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:1937-2 No score
Security update for rsyslog
This update for rsyslog fixes the following security issue:
- CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393).
- Record
SUSE-SU-2018:1937-2- Updated
- 2026-11-02
OSVSUSE-SU-2018:2038-1 No score
Security update for rsyslog
This update for rsyslog fixes the following issues:
The following security vulnerability was addressed:
CVE-2015-3243: Make sure that log files are not created world-readable (bsc#935393)
- Record
SUSE-SU-2018:2038-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rsyslogDebian:12 |
All versions, plus listed versions 8.2302.0-18.2302.0-1+deb12u18.2304.0-18.2306.0-18.2306.0-2 Show 45 moreShow less8.2308.0-18.2310.0-18.2310.0-28.2310.0-38.2310.0-48.2312.0-18.2312.0-28.2312.0-38.2402.0-18.2404.0-18.2404.0-28.2406.0-18.2408.0-18.2408.0-28.2410.0-18.2412.0-18.2412.0-28.2502.0-18.2502.0-28.2502.0-38.2502.0-48.2502.0-58.2502.0-68.2504.0-18.2506.0-18.2506.0-28.2506.0-38.2506.0-48.2506.0-68.2510.0-18.2510.0-28.2510.0-38.2510.0-48.2510.0-58.2512.0-18.2512.0-28.2512.0-38.2602.0-18.2604.0-18.2604.0-28.2604.0-38.2604.0-48.2606.0-18.2606.0-28.2606.0-3 |
None known |
rsyslogDebian:13 |
All versions, plus listed versions 8.2504.0-18.2504.0-1+deb13u18.2504.0-1+deb13u28.2506.0-18.2506.0-2 Show 24 moreShow less8.2506.0-38.2506.0-48.2506.0-68.2510.0-18.2510.0-28.2510.0-38.2510.0-48.2510.0-58.2512.0-18.2512.0-28.2512.0-38.2602.0-18.2604.0-18.2604.0-28.2604.0-38.2604.0-48.2606.0-18.2606.0-28.2606.0-38.2606.0-48.2608.0-18.2608.0-28.2608.0-38.2608.0-4 |
None known |
rsyslogDebian:14 |
All versions, plus listed versions 8.2504.0-18.2506.0-18.2506.0-28.2506.0-38.2506.0-4 Show 22 moreShow less8.2506.0-68.2510.0-18.2510.0-28.2510.0-38.2510.0-48.2510.0-58.2512.0-18.2512.0-28.2512.0-38.2602.0-18.2604.0-18.2604.0-28.2604.0-38.2604.0-48.2606.0-18.2606.0-28.2606.0-38.2606.0-48.2608.0-18.2608.0-28.2608.0-38.2608.0-4 |
None known |
rsyslogSUSE:Linux Enterprise Module for Basesystem 15 |
before 8.33.1-3.3.1 | 8.33.1-3.3.1 |
rsyslogSUSE:Linux Enterprise Module for Server Applications 15 |
before 8.33.1-3.3.1 | 8.33.1-3.3.1 |
rsyslogSUSE:Linux Enterprise Desktop 12 SP3 |
before 8.24.0-3.3.1 | 8.24.0-3.3.1 |
rsyslogSUSE:Linux Enterprise Server 12 SP3 |
before 8.24.0-3.3.1 | 8.24.0-3.3.1 |
rsyslogSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 8.24.0-3.3.1 | 8.24.0-3.3.1 |
rsyslogopenSUSE:Tumbleweed |
before 8.2106.0-1.2 | 8.2106.0-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3243 is a medium vulnerability (CVSS 5.5) in Rsyslog, published July 25, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in rsyslog 8.33.1-3.3.1.
References
securityfocus.com/bid/75298
securitytracker.com/id/1032885
openwall.com/lists/oss-security/2015/06/20/3
bugzilla.redhat.com/show_bug.cgi?id=1232826
nvd.nist.gov/vuln/detail/CVE-2015-3243
Show 7 moreShow less
github.com/advisories/GHSA-mg7r-rgfr-mmj9
security-tracker.debian.org/tracker/CVE-2015-3243
suse.com/support/update/announcement/2018/suse-su-20181937-1
bugzilla.suse.com/935393
Left out here: 5 versions. The JSON record has them.