CVE-2013-4758 | BDVDB-2026-57802 Detail

Description#

Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2013/07/05/2
http://www.rsyslog.com/rsyslog-7-5-2-v7-devel-released/
http://www.rsyslog.com/rsyslog-7-4-2-v7-stable-released/

Exploit#

No public exploit known

History#

Version 12013-10-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.