CVE-2017-12588

The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.
Configurations

Configuration 1 (hide)

cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-08-06 14:29

Updated : 2023-12-10 12:15


NVD link : CVE-2017-12588

Mitre link : CVE-2017-12588

CVE.ORG link : CVE-2017-12588


JSON object : View

Products Affected

rsyslog

  • rsyslog
CWE
CWE-134

Use of Externally-Controlled Format String