Medium severity5.5NVD Advisory· Published Nov 14, 2019· Updated Jun 16, 2026

CVE-2011-1490

Description

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rsyslog/Rsyslog3 versions
cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*range: <5.7.6
- (no CPE)range: <5.7.6
- (no CPE)range: before 5.7.6
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2anvdPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.htmlnvdMailing ListThird Party Advisory
access.redhat.com/security/cve/cve-2011-1490nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
security-tracker.debian.org/tracker/CVE-2011-1490nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000