Unrated severityNVD Advisory· Published Nov 2, 2014· Updated May 6, 2026
CVE-2014-3683
CVE-2014-3683
Description
Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634.
Affected products
26cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*range: <=7.6.6
- cpe:2.3:a:rsyslog:rsyslog:8.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:rsyslog:rsyslog:8.4.1:*:*:*:*:*:*:*
cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:sysklogd_project:sysklogd:*:*:*:*:*:*:*:*range: <=1.5
- cpe:2.3:a:sysklogd_project:sysklogd:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:sysklogd_project:sysklogd:1.4.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.openwall.com/lists/oss-security/2014/10/03/1nvdPatch
- www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/nvdExploitPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.htmlnvd
- lists.opensuse.org/opensuse-updates/2014-10/msg00020.htmlnvd
- lists.opensuse.org/opensuse-updates/2014-10/msg00021.htmlnvd
- secunia.com/advisories/61494nvd
- www.debian.org/security/2014/dsa-3047nvd
- www.openwall.com/lists/oss-security/2014/09/30/15nvd
- www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlnvd
- www.ubuntu.com/usn/USN-2381-1nvd
News mentions
0No linked articles in our index yet.