Vulnerability-Lookup

ubuntu-cve-2014-3683

Vulnerability from osv_ubuntu

Published

2014-10-02 00:00

Modified

2025-09-08 16:43

Summary

Details

Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634.

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2014-3683	REPORT
	http://www.rsyslog.com/remote-syslog-pri-vulnerab…	REPORT
	https://ubuntu.com/security/notices/USN-2381-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2014-3683	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "rsyslog",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-gnutls",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-gssapi",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-mysql",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-pgsql",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-relp",
            "binary_version": "7.4.4-1ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "rsyslog",
        "purl": "pkg:deb/ubuntu/rsyslog@7.4.4-1ubuntu2.3?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.4.4-1ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.11-2ubuntu4",
        "7.4.4-1ubuntu1",
        "7.4.4-1ubuntu2",
        "7.4.4-1ubuntu2.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634.",
  "id": "UBUNTU-CVE-2014-3683",
  "modified": "2025-09-08T16:43:10Z",
  "published": "2014-10-02T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-3683"
    },
    {
      "type": "REPORT",
      "url": "http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2381-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3683"
    }
  ],
  "related": [
    "USN-2381-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2014-3683"
  ]
}

CVE-2014-3683 (GCVE-0-2014-3683)

Vulnerability from cvelistv5 – Published: 2014-11-02 00:00 – Updated: 2024-08-06 10:50

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat

References

10 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2014-1…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-1…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2014/0…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/61494	third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2014/10/03/1	mailing-listx_refsource_MLIST
http://www.rsyslog.com/remote-syslog-pri-vulnerab…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2381-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2014/dsa-3047	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM

Date Public

2014-10-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.315Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2014:1297",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html"
          },
          {
            "name": "SUSE-SU-2014:1294",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html"
          },
          {
            "name": "openSUSE-SU-2014:1298",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html"
          },
          {
            "name": "[oss-security] 20140930 vulnerability in rsyslog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/09/30/15"
          },
          {
            "name": "61494",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61494"
          },
          {
            "name": "[oss-security] 20141003 sysklogd vulnerability (CVE-2014-3634)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/10/03/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/"
          },
          {
            "name": "USN-2381-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2381-1"
          },
          {
            "name": "DSA-3047",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3047"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-14T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "openSUSE-SU-2014:1297",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html"
        },
        {
          "name": "SUSE-SU-2014:1294",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html"
        },
        {
          "name": "openSUSE-SU-2014:1298",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html"
        },
        {
          "name": "[oss-security] 20140930 vulnerability in rsyslog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/09/30/15"
        },
        {
          "name": "61494",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61494"
        },
        {
          "name": "[oss-security] 20141003 sysklogd vulnerability (CVE-2014-3634)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/10/03/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/"
        },
        {
          "name": "USN-2381-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2381-1"
        },
        {
          "name": "DSA-3047",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3047"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3683",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2014:1297",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html"
            },
            {
              "name": "SUSE-SU-2014:1294",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html"
            },
            {
              "name": "openSUSE-SU-2014:1298",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html"
            },
            {
              "name": "[oss-security] 20140930 vulnerability in rsyslog",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/09/30/15"
            },
            {
              "name": "61494",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61494"
            },
            {
              "name": "[oss-security] 20141003 sysklogd vulnerability (CVE-2014-3634)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/10/03/1"
            },
            {
              "name": "http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/",
              "refsource": "CONFIRM",
              "url": "http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/"
            },
            {
              "name": "USN-2381-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2381-1"
            },
            {
              "name": "DSA-3047",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3047"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3683",
    "datePublished": "2014-11-02T00:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.315Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-2381-1

Vulnerability from osv_ubuntu

Published

2014-10-09 16:42

Modified

2026-02-10 04:40

Summary

rsyslog vulnerabilities

Details

It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server and cause it to stop responding, resulting in a denial of service and possibly message loss. (CVE-2014-3634, CVE-2014-3683)

References

URL

Type

	https://ubuntu.com/security/notices/USN-2381-1	ADVISORY
	https://ubuntu.com/security/CVE-2014-3634	REPORT
	https://ubuntu.com/security/CVE-2014-3683	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2014-3634",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2014-3683",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "rsyslog",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-gnutls",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-gssapi",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-mysql",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-pgsql",
            "binary_version": "7.4.4-1ubuntu2.3"
          },
          {
            "binary_name": "rsyslog-relp",
            "binary_version": "7.4.4-1ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "rsyslog",
        "purl": "pkg:deb/ubuntu/rsyslog@7.4.4-1ubuntu2.3?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.4.4-1ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.11-2ubuntu4",
        "7.4.4-1ubuntu1",
        "7.4.4-1ubuntu2",
        "7.4.4-1ubuntu2.1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Rsyslog incorrectly handled invalid PRI values. An\nattacker could use this issue to send malformed messages to the Rsyslog\nserver and cause it to stop responding, resulting in a denial of service\nand possibly message loss. (CVE-2014-3634, CVE-2014-3683)\n",
  "id": "USN-2381-1",
  "modified": "2026-02-10T04:40:50Z",
  "published": "2014-10-09T16:42:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2381-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-3634"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-3683"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "rsyslog vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2014-3634",
    "UBUNTU-CVE-2014-3683"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2014-3683

Vulnerability from osv_ubuntu

CVE-2014-3683 (GCVE-0-2014-3683)

usn-2381-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature