{"id":"CVE-2015-3243","aliases":["DEBIAN-CVE-2015-3243","EUVD-2015-3298","GHSA-mg7r-rgfr-mmj9","SUSE-SU-2018:1937-1","SUSE-SU-2018:1937-2","SUSE-SU-2018:2038-1","openSUSE-SU-2024:11309-1"],"status":"published","title":"rsyslog uses weak permissions for generating log files, which allows local users to obtain...","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00449,"percentile":0.39311,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2017-07-25T18:00:00Z","modified":"2026-09-09T07:00:49Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"rsyslog","fixed_in":["8.33.1-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"rsyslog","fixed_in":["8.33.1-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rsyslog","fixed_in":["8.2106.0-1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.2302.0-1","8.2302.0-1+deb12u1","8.2304.0-1","8.2306.0-1","8.2306.0-2","8.2308.0-1","8.2310.0-1","8.2310.0-2","8.2310.0-3","8.2310.0-4","8.2312.0-1","8.2312.0-2","8.2312.0-3","8.2402.0-1","8.2404.0-1","8.2404.0-2","8.2406.0-1","8.2408.0-1","8.2408.0-2","8.2410.0-1","8.2412.0-1","8.2412.0-2","8.2502.0-1","8.2502.0-2","8.2502.0-3","8.2502.0-4","8.2502.0-5","8.2502.0-6","8.2504.0-1","8.2506.0-1","8.2506.0-2","8.2506.0-3","8.2506.0-4","8.2506.0-6","8.2510.0-1","8.2510.0-2","8.2510.0-3","8.2510.0-4","8.2510.0-5","8.2512.0-1","8.2512.0-2","8.2512.0-3","8.2602.0-1","8.2604.0-1","8.2604.0-2","8.2604.0-3","8.2604.0-4","8.2606.0-1","8.2606.0-2","8.2606.0-3","8.2606.0-4","8.2608.0-1","8.2608.0-2","8.2608.0-3","8.2608.0-4"]},{"source":"osv","ecosystem":"Debian:13","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.2504.0-1","8.2504.0-1+deb13u1","8.2504.0-1+deb13u2","8.2506.0-1","8.2506.0-2","8.2506.0-3","8.2506.0-4","8.2506.0-6","8.2510.0-1","8.2510.0-2","8.2510.0-3","8.2510.0-4","8.2510.0-5","8.2512.0-1","8.2512.0-2","8.2512.0-3","8.2602.0-1","8.2604.0-1","8.2604.0-2","8.2604.0-3","8.2604.0-4","8.2606.0-1","8.2606.0-2","8.2606.0-3","8.2606.0-4","8.2608.0-1","8.2608.0-2","8.2608.0-3","8.2608.0-4"]},{"source":"osv","ecosystem":"Debian:14","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.2504.0-1","8.2506.0-1","8.2506.0-2","8.2506.0-3","8.2506.0-4","8.2506.0-6","8.2510.0-1","8.2510.0-2","8.2510.0-3","8.2510.0-4","8.2510.0-5","8.2512.0-1","8.2512.0-2","8.2512.0-3","8.2602.0-1","8.2604.0-1","8.2604.0-2","8.2604.0-3","8.2604.0-4","8.2606.0-1","8.2606.0-2","8.2606.0-3","8.2606.0-4","8.2608.0-1","8.2608.0-2","8.2608.0-3","8.2608.0-4"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2106.0-1.2"}]}]}],"products":[{"vendor":"rsyslog","product":"rsyslog"}],"references":[{"url":"http://www.securityfocus.com/bid/75298","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1032885","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/20/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","VDB Entry","advisory","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232826","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/18/12","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","VDB Entry","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3243"},{"url":"https://github.com/advisories/GHSA-mg7r-rgfr-mmj9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3243","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181937-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/935393","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3243","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181937-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182038-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-3243","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2017-07-25T18:00:00Z","modified":"2024-08-06T05:39:32.044Z","updated_at":"2026-11-02T14:35:41.976732Z"}],"euvd":[{"id":"EUVD-2015-3298","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2017-07-25T18:00:00Z","modified":"2024-08-06T05:39:32Z","updated_at":"2026-11-03T02:22:08.642556Z"}],"ghsa":[{"id":"GHSA-mg7r-rgfr-mmj9","title":"rsyslog uses weak permissions for generating log files, which allows local users to obtain...","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2022-05-17T02:20:39Z","modified":"2023-01-27T05:04:18Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:42:25.677567Z"}],"nvd":[{"id":"CVE-2015-3243","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2017-07-25T18:29:00.493Z","modified":"2026-06-17T00:25:36.403Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:03:17.730372Z"}],"osv":[{"id":"CVE-2015-3243","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2017-07-25T18:29:00Z","modified":"2026-04-10T03:45:15.392876Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3243","description":"rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.","status":"published","published":"2017-07-25T18:29:00.493Z","modified":"2026-09-09T07:00:49.573164267Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"openSUSE-SU-2024:11309-1","title":"rsyslog-8.2106.0-1.2 on GA media","description":"These are all security issues fixed in the rsyslog-8.2106.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:54.953874Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:1937-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following security issue:\n\n- CVE-2015-3243: Prevent weak permissions for generated log files, which\n  allowed local users to obtain sensitive information (bsc#935393).\n","status":"published","published":"2018-07-12T09:04:19Z","modified":"2026-02-04T04:02:51.150904Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1937-2","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following security issue:\n\n- CVE-2015-3243: Prevent weak permissions for generated log files, which\n  allowed local users to obtain sensitive information (bsc#935393).\n","status":"published","published":"2018-07-12T09:04:19Z","modified":"2026-02-04T02:36:59.689643Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2038-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nThe following security vulnerability was addressed:\n\nCVE-2015-3243: Make sure that log files are not created world-readable (bsc#935393)\n","status":"published","published":"2018-07-23T08:51:06Z","modified":"2026-02-04T02:27:15.075324Z","updated_at":"2026-11-02T15:53:44.972817Z"}]}}