CVE-2015-3243 rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
MediumCVSS 5.5
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rsyslog(Debian:12) | All versions | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2302.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2302.0-1+deb12u1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2304.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2306.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2306.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2308.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2310.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2310.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2310.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2310.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2312.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2312.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2312.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2402.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2404.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2404.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2406.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2408.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2408.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2410.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2412.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2412.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2502.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2502.0-2 | No fix listed |
Show 90 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rsyslog(Debian:12) | = 8.2502.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2502.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2502.0-5 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2502.0-6 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2504.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2506.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2506.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2506.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2506.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2506.0-6 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2510.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2510.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2510.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2510.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2510.0-5 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2512.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2512.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2512.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2602.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2604.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2604.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2604.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2604.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2606.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2606.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2606.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2606.0-4 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2608.0-1 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2608.0-2 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2608.0-3 | No fix listed |
| debian/rsyslog(Debian:12) | = 8.2608.0-4 | No fix listed |
| debian/rsyslog(Debian:13) | All versions | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2504.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2504.0-1+deb13u1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2504.0-1+deb13u2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2506.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2506.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2506.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2506.0-4 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2506.0-6 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2510.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2510.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2510.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2510.0-4 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2510.0-5 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2512.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2512.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2512.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2602.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2604.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2604.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2604.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2604.0-4 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2606.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2606.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2606.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2606.0-4 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2608.0-1 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2608.0-2 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2608.0-3 | No fix listed |
| debian/rsyslog(Debian:13) | = 8.2608.0-4 | No fix listed |
| debian/rsyslog(Debian:14) | All versions | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2504.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2506.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2506.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2506.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2506.0-4 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2506.0-6 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2510.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2510.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2510.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2510.0-4 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2510.0-5 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2512.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2512.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2512.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2602.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2604.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2604.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2604.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2604.0-4 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2606.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2606.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2606.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2606.0-4 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2608.0-1 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2608.0-2 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2608.0-3 | No fix listed |
| debian/rsyslog(Debian:14) | = 8.2608.0-4 | No fix listed |
| rsyslog | All versions | No fix listed |
References
- Debian Security Tracker CVE-2015-3243 vendor-advisory
- [oss-security] 20150618 CVE-2015-3243 rsyslog: some log files are created world-readable mailing-list vdb-entry
- [oss-security] 20150620 Re: CVE-2015-3243 rsyslog: some log files are created world-readable mailing-list vdb-entry
- 75298 third-party-advisory vdb-entry
- 1032885 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry