[ GLSA 201412-35 ] RSYSLOG: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: RSYSLOG: Denial of Service (GLSA 201412-35)
Severity: normal
Exploitable: local, remote
Date: December 24, 2014
Bug(s): #395709, #491856, #524058, #524290
ID: 201412-35

Synopsis

Multiple vulnerabilities have been found in RSYSLOG, allowing
attackers to cause Denial of Service.


Background

RSYSLOG is an enhanced multi-threaded syslogd with database support and
more.


Affected Packages

Package: app-admin/rsyslog
Vulnerable: < 8.4.2
Unaffected: >= 8.4.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in RSYSLOG. Please review
the CVE identifiers referenced below for details.


Impact

A context-dependent attacker may be able to create a Denial of Service
condition.


Workaround

There is no known workaround at this time.

Resolution

All RSYSLOG users should upgrade to the latest version: