Re: CVE Request -- rsyslog -- DoS due integer signedness error while extending rsyslog counted string buffer

[Kurt Seifried <kseifried () redhat com>]

On 12/22/2011 05:19 AM, Jan Lieskovsky wrote:
> An integer signedness error, leading to heap based buffer overflow was 
> found in
> the way the imfile module of rsyslog, an enhanced system logging and 
> kernel
> message trapping daemon, processed text files larger than 64 KB. When the
> imfile rsyslog module was enabled, a local attacker could use this 
> flaw to
> cause denial of service (rsyslogd daemon hang) via specially-crafted 
> message,
> to be logged.
>
> Upstream bug report:
> [1] http://bugzilla.adiscon.com/show_bug.cgi?id=221
>
> Upstream patch:
> [2] 
> http://git.adiscon.com/?p=rsyslog.git;a=commit;h=6bad782f154b7f838c7371bf99c13f6dc4ec4101
>
> References:
> [3] https://bugzilla.redhat.com/show_bug.cgi?id=769822
>
> Could you allocate a CVE id for this?
>
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Response Team
Please use CVE-2011-4623 for this issue.

--

-Kurt Seifried / Red Hat Security Response Team