Medium severity5.5NVD Advisory· Published Nov 14, 2019· Updated Jun 16, 2026

CVE-2011-1489

Description

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rsyslog/Rsyslog3 versions
cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*range: <5.7.6
- (no CPE)range: <5.7.6
- (no CPE)range: before 5.7.6
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2anvdPatchThird Party Advisory
access.redhat.com/security/cve/cve-2011-1489nvdExploitPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlnvdMailing ListThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
security-tracker.debian.org/tracker/CVE-2011-1489nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000