Approved changes feed: RSS · Atom

cpe:2.3:a:rsyslog:rsyslog:7.1.7:*:*:*:*:*:*:*

part: a version: 7.1.7 update: *

VendorRsyslog (f723e340-bdcc-534e-a8e1-517ee98711af)
ProductRsyslog (be151fcf-b724-5377-925d-129803ae9e9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rsyslog purl2cpe 2026-06-01 10:14:18.711179
pkg:deb/ubuntu/rsyslog purl2cpe 2026-06-01 10:14:18.711180
pkg:github/rsyslog/rsyslog purl2cpe 2026-06-01 10:14:18.711182
pkg:rpm/fedora/rsyslog purl2cpe 2026-06-01 10:14:18.711183
pkg:rpm/opensuse/rsyslog purl2cpe 2026-06-01 10:14:18.711185

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4758 vulnerable 2026-06-08 05:04:49.561862 Details available
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.
Published: 2013-10-04T17:00:00.000Z
Updated: 2024-09-16T18:34:27.910Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.