VDB
DEBIAN-CVE-2014-3634
DEBIAN-CVE-2014-3634
PUBLISHED
CVSS 9.300000190734863 CRITICAL
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | inetutils | 0, 0, 0 |
| Debian:13 | inetutils | 0, 0, 0 |
| Debian:11 | rsyslog | 0, 0, 0 |
| Debian:14 | rsyslog | 0, 0, 0 |
| Debian:13 | rsyslog | 0, 0, 0 |
| Debian:14 | inetutils | 0, 0, 0 |
| Debian:12 | rsyslog | 0, 0, 0 |
| Debian:12 | inetutils | 0, 0, 0 |
Timeline
- Nov 2, 2014 CVE Published
- Apr 28, 2026 CVE Updated