Unrated severityNVD Advisory· Published Nov 2, 2014· Updated Jun 17, 2026
CVE-2014-3634
CVE-2014-3634
Description
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*range: <=7.6.5
- cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.4.0:*:*:*:*:*:*:*
- (no CPE)range: <7.6.6, <8.4.1
cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*range: <=1.5
- cpe:2.3:a:sysklogd_project:sysklogd:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.4.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.5
- osv-coords2 versionspkg:rpm/opensuse/klogd&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/rsyslog&distro=openSUSE%20Tumbleweed
< 1.4.1-786.3+ 1 more
- (no CPE)range: < 1.4.1-786.3
- (no CPE)range: < 8.23.0-2.1
Patches
Vulnerability mechanics
References
18- www.openwall.com/lists/oss-security/2014/10/03/1nvdPatch
- www.rsyslog.com/remote-syslog-pri-vulnerability/nvdExploitPatchVendor Advisory
- advisories.mageia.org/MGASA-2014-0411.htmlnvd
- linux.oracle.com/errata/ELSA-2014-1654nvd
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.htmlnvd
- lists.opensuse.org/opensuse-updates/2014-10/msg00020.htmlnvd
- lists.opensuse.org/opensuse-updates/2014-10/msg00021.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-1397.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-1654.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-1671.htmlnvd
- secunia.com/advisories/61494nvd
- secunia.com/advisories/61720nvd
- secunia.com/advisories/61930nvd
- www.debian.org/security/2014/dsa-3040nvd
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2014/09/30/15nvd
- www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlnvd
- www.ubuntu.com/usn/USN-2381-1nvd
News mentions
0No linked articles in our index yet.