CVE-2011-3200
NoneCVSS
—
EPSS
20.8%
Published
Sep 6, 2011
CISA due date
—
The record
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | rsyslog | 0 | 5.8.5-1 |
| Debian:11 | rsyslog | 0 | 5.8.5-1 |
| Debian:12 | rsyslog | 0 | 5.8.5-1 |
| Debian:13 | rsyslog | 0 | 5.8.5-1 |
| Red Hat:enterprise_linux:6::server | rsyslog | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-debuginfo | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-gnutls | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-gssapi | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-mysql | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-pgsql | 0 | 0:4.6.2-3.el6_1.2 |
| Red Hat:enterprise_linux:6::server | rsyslog-relp | 0 | 0:4.6.2-3.el6_1.2 |
| openSUSE:Tumbleweed | rsyslog | 0 | 8.23.0-2.1 |
Related vulnerabilities
- CVE-2014-3634 rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote… Also affects rsyslog
- CVE-2013-6370 Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to… Also affects rsyslog
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47. CWE-119