Skip to content
Fencer Intel
high 7.5

CVE-2014-3634 json

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possib…

published 2014-11-02 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-3592

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
7.5%
EPSS 7.5% chance of exploitation in 30 days, percentile 94%
public exploits
0
none known

Summary

rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.

Patch / fix

  • rsyslog Debian 14, Debian 13, Debian 12 8.4.1-1
  • inetutils Debian 14, Debian 13, Debian 12 2:1.9.2.39.3a460-1

debian advisories DEBIAN-CVE-2014-3634

  • rsyslog Ubuntu 14.04 LTS 7.4.4-1ubuntu2.3

ubuntu advisories UBUNTU-CVE-2014-3634

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • rsyslog RHEL 6 5.8.10-9.el6_6
  • rsyslog5 RHEL 5 5.8.12-5.el5_11
  • rsyslog-relp RHEL 6 5.8.10-9.el6_6
  • rsyslog-snmp RHEL 6 5.8.10-9.el6_6
  • rsyslog-mysql RHEL 6 5.8.10-9.el6_6
  • rsyslog-pgsql RHEL 6 5.8.10-9.el6_6
  • rsyslog5-snmp RHEL 5 5.8.12-5.el5_11
  • rsyslog-gnutls RHEL 6 5.8.10-9.el6_6

red hat advisories RHSA-2014:1671RHSA-2014:1654RHSA-2014:1397

  • klogd openSUSE Tumbleweed 1.4.1-786.3
  • rsyslog openSUSE Tumbleweed 8.23.0-2.1

opensuse advisories openSUSE-SU-2024:10155-1openSUSE-SU-2024:10498-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-3634 updated cvss 1.8

rsyslog: remote syslog PRI vulnerability

  • Red Hat Enterprise Linux 5 rsyslog, sysklogd
    affected: no fix planned “Will not fix”
  • Red Hat OpenShift Enterprise 2 rsyslog7
    affected: no fix available
  • Red Hat Storage 2 rsyslog
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux (v. 5 server) rsyslog5 5.8.12-5.el5_11, rsyslog5-snmp 5.8.12-5.el5_11, rsyslog5-mysql 5.8.12-5.el5_11, rsyslog5-pgsql 5.8.12-5.el5_11, rsyslog5-gnutls 5.8.12-5.el5_11, rsyslog5-gssapi 5.8.12-5.el5_11
    fixed: vendor fix RHSA-2014:1671
  • Red Hat Enterprise Linux Client (v. 7) rsyslog 7.4.7-7.el7_0, rsyslog-relp 7.4.7-7.el7_0, rsyslog-gnutls 7.4.7-7.el7_0, rsyslog-gssapi 7.4.7-7.el7_0, rsyslog-mmjsonparse 7.4.7-7.el7_0 Red Hat Enterprise Linux Client Optional (v. 7) rsyslog-snmp 7.4.7-7.el7_0, rsyslog-mysql 7.4.7-7.el7_0, rsyslog-pgsql 7.4.7-7.el7_0, rsyslog-crypto 7.4.7-7.el7_0, rsyslog-libdbi 7.4.7-7.el7_0, rsyslog-mmaudit 7.4.7-7.el7_0, +4 more Red Hat Enterprise Linux ComputeNode (v. 7) rsyslog 7.4.7-7.el7_0, rsyslog-relp 7.4.7-7.el7_0, rsyslog-gnutls 7.4.7-7.el7_0, rsyslog-gssapi 7.4.7-7.el7_0, rsyslog-mmjsonparse 7.4.7-7.el7_0 Red Hat Enterprise Linux ComputeNode Optional (v. 7) rsyslog-snmp 7.4.7-7.el7_0, rsyslog-mysql 7.4.7-7.el7_0, rsyslog-pgsql 7.4.7-7.el7_0, rsyslog-crypto 7.4.7-7.el7_0, rsyslog-libdbi 7.4.7-7.el7_0, rsyslog-mmaudit 7.4.7-7.el7_0, +4 more
    fixed: vendor fix RHSA-2014:1397
  • Red Hat Enterprise Linux Desktop (v. 5 client) rsyslog5 5.8.12-5.el5_11, rsyslog5-snmp 5.8.12-5.el5_11, rsyslog5-mysql 5.8.12-5.el5_11, rsyslog5-pgsql 5.8.12-5.el5_11, rsyslog5-gnutls 5.8.12-5.el5_11, rsyslog5-gssapi 5.8.12-5.el5_11 Red Hat Enterprise Linux Desktop (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog7 7.4.10-3.el6_6, rsyslog-relp 5.8.10-9.el6_6, rsyslog7-relp 7.4.10-3.el6_6, rsyslog-gnutls 5.8.10-9.el6_6, rsyslog-gssapi 5.8.10-9.el6_6, +2 more Red Hat Enterprise Linux Desktop Optional (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog-snmp 5.8.10-9.el6_6, rsyslog-mysql 5.8.10-9.el6_6, rsyslog-pgsql 5.8.10-9.el6_6, rsyslog7-snmp 7.4.10-3.el6_6, rsyslog7-mysql 7.4.10-3.el6_6, +2 more Red Hat Enterprise Linux HPC Node (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog7 7.4.10-3.el6_6, rsyslog-relp 5.8.10-9.el6_6, rsyslog7-relp 7.4.10-3.el6_6, rsyslog-gnutls 5.8.10-9.el6_6, rsyslog-gssapi 5.8.10-9.el6_6, +2 more Red Hat Enterprise Linux HPC Node Optional (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog-snmp 5.8.10-9.el6_6, rsyslog-mysql 5.8.10-9.el6_6, rsyslog-pgsql 5.8.10-9.el6_6, rsyslog7-snmp 7.4.10-3.el6_6, rsyslog7-mysql 7.4.10-3.el6_6, +2 more Red Hat Enterprise Linux Server (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog7 7.4.10-3.el6_6, rsyslog-relp 5.8.10-9.el6_6, rsyslog-mysql 5.8.10-9.el6_6, rsyslog-pgsql 5.8.10-9.el6_6, rsyslog7-relp 7.4.10-3.el6_6, +6 more
    fixed: vendor fix RHSA-2014:1671
  • Red Hat Enterprise Linux Server (v. 7) rsyslog 7.4.7-7.el7_0, rsyslog-relp 7.4.7-7.el7_0, rsyslog-mysql 7.4.7-7.el7_0, rsyslog-pgsql 7.4.7-7.el7_0, rsyslog-gnutls 7.4.7-7.el7_0, rsyslog-gssapi 7.4.7-7.el7_0, +1 more
    fixed: vendor fix RHSA-2014:1397
  • Red Hat Enterprise Linux Server Optional (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog-snmp 5.8.10-9.el6_6, rsyslog7-snmp 7.4.10-3.el6_6, rsyslog7-elasticsearch 7.4.10-3.el6_6
    fixed: vendor fix RHSA-2014:1671
show 5 more
  • Red Hat Enterprise Linux Server Optional (v. 7) rsyslog-snmp 7.4.7-7.el7_0, rsyslog-crypto 7.4.7-7.el7_0, rsyslog-libdbi 7.4.7-7.el7_0, rsyslog-mmaudit 7.4.7-7.el7_0, rsyslog-udpspoof 7.4.7-7.el7_0, rsyslog-mmjsonparse 7.4.7-7.el7_0, +3 more
    fixed: vendor fix RHSA-2014:1397
  • Red Hat Enterprise Linux Workstation (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog7 7.4.10-3.el6_6, rsyslog-relp 5.8.10-9.el6_6, rsyslog-mysql 5.8.10-9.el6_6, rsyslog-pgsql 5.8.10-9.el6_6, rsyslog7-relp 7.4.10-3.el6_6, +6 more
    fixed: vendor fix RHSA-2014:1671
  • Red Hat Enterprise Linux Workstation (v. 7) rsyslog 7.4.7-7.el7_0, rsyslog-relp 7.4.7-7.el7_0, rsyslog-mysql 7.4.7-7.el7_0, rsyslog-pgsql 7.4.7-7.el7_0, rsyslog-gnutls 7.4.7-7.el7_0, rsyslog-gssapi 7.4.7-7.el7_0, +1 more
    fixed: vendor fix RHSA-2014:1397
  • Red Hat Enterprise Linux Workstation Optional (v. 6) rsyslog 5.8.10-9.el6_6, rsyslog-snmp 5.8.10-9.el6_6, rsyslog7-snmp 7.4.10-3.el6_6, rsyslog7-elasticsearch 7.4.10-3.el6_6
    fixed: vendor fix RHSA-2014:1671
  • Red Hat Enterprise Linux Workstation Optional (v. 7) rsyslog-snmp 7.4.7-7.el7_0, rsyslog-crypto 7.4.7-7.el7_0, rsyslog-libdbi 7.4.7-7.el7_0, rsyslog-mmaudit 7.4.7-7.el7_0, rsyslog-udpspoof 7.4.7-7.el7_0, rsyslog-mmnormalize 7.4.7-7.el7_0, +2 more
    fixed: vendor fix RHSA-2014:1397

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

7.55% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • rsyslog.com http://www.rsyslog.com/remote-syslog-pri-vulnerability/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.