Descriptionimudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service (disk consumption) via a large number of spurious messages.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SR:2009:001, published Mon, 12 Jan 2009 13:00:00 +0000
SUSE Timeline for this CVECVE page created: Fri Jun 28 06:35:39 2013
CVE page last modified: Fri Oct 7 12:45:44 2022