CVE-2011-4623

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow.

• rsyslog rsyslog 4.1.0 • rsyslog rsyslog 4.1.1 • rsyslog rsyslog 4.1.2 • rsyslog rsyslog 4.1.3 • rsyslog rsyslog 4.1.4 • rsyslog rsyslog 4.1.5 • rsyslog rsyslog 4.1.6 • rsyslog rsyslog 4.1.7 • rsyslog rsyslog 4.2.0 • rsyslog rsyslog 4.3.0 • rsyslog rsyslog 4.3.1 • rsyslog rsyslog 4.3.2 • rsyslog rsyslog 4.4.0 • rsyslog rsyslog 4.4.1 • rsyslog rsyslog 4.4.2 • rsyslog rsyslog 4.5.0 • rsyslog rsyslog 4.5.1 • rsyslog rsyslog 4.5.2 • rsyslog rsyslog 4.5.3 • rsyslog rsyslog 4.5.4 • rsyslog rsyslog 4.5.5 • rsyslog rsyslog 4.5.6 • rsyslog rsyslog 4.5.7 • rsyslog rsyslog 4.5.8 • rsyslog rsyslog 4.6.0 • rsyslog rsyslog 4.6.1 • rsyslog rsyslog 4.6.2 • rsyslog rsyslog 4.6.3 • rsyslog rsyslog 4.6.4 • rsyslog rsyslog 4.6.5 • rsyslog rsyslog 5.1.0 • rsyslog rsyslog 5.1.1 • rsyslog rsyslog 5.1.2 • rsyslog rsyslog 5.1.3 • rsyslog rsyslog 5.1.4 • rsyslog rsyslog 5.1.5 • rsyslog rsyslog 5.1.6 • rsyslog rsyslog 5.2.0 • rsyslog rsyslog 5.2.1 • rsyslog rsyslog 5.2.2 • rsyslog rsyslog 5.3.1 • rsyslog rsyslog 5.3.2 • rsyslog rsyslog 5.3.3 • rsyslog rsyslog 5.3.4 • rsyslog rsyslog 5.3.5 • rsyslog rsyslog 5.3.6 • rsyslog rsyslog 5.3.7 • rsyslog rsyslog 5.4.0 • rsyslog rsyslog 5.4.1 • rsyslog rsyslog 5.4.2 • rsyslog rsyslog 5.5.0 • rsyslog rsyslog 5.5.1 • rsyslog rsyslog 5.5.2 • rsyslog rsyslog 5.5.3 • rsyslog rsyslog 5.5.4 • rsyslog rsyslog 5.5.5 • rsyslog rsyslog 5.5.6 • rsyslog rsyslog 5.5.7 • rsyslog rsyslog 5.6.0 • rsyslog rsyslog 5.6.1 … and 12 more