CVE:CVE-2011-1489
CNNVD:CNNVD-201911-807
Adiscon Rsyslog是德国Adiscon公司的一个用于收集系统日志的库。
Adiscon Rsyslog 5.7.6之前版本中日志消息记录的方法存在安全漏洞。本地攻击者可借助从属于多个规则集的日志消息利用该漏洞造成rsyslogd守护进程停止服务。
solution:Upgrade rsyslog rsyslog to a higher version than 5.7.6,and avoid the version (,5.7.6); Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0