CVE-2015-3243: rsyslog
CVSS: 5.5v3.0MediumModified
AliasesSUSE-SU-2018:1937-1SUSE-SU-2018:1937-2SUSE-SU-2018:2038-1DEBIAN-CVE-2015-3243CGA-24pw-3jrc-69x6CGA-2939-cqhp-26p7CGA-2w6m-jcm7-vmjjCGA-34fw-pgvc-7xvqCGA-37qg-vpf6-83x4CGA-3j5q-pgv5-vc5vCGA-3mmq-92f9-h524CGA-3pf6-jv57-3899CGA-3w87-hwh6-qh9pCGA-3wj5-83wv-92rxCGA-3ww9-g53x-26wwCGA-4cq4-qm5p-w8xgCGA-4hhx-5x79-gpcfCGA-4r8p-qr8q-vmcmCGA-54pp-2gcf-qprhCGA-55h2-3v3f-vvwqCGA-5675-wp4x-mhrmCGA-58j2-cq3g-9vpgCGA-5pjr-p5f3-92v3CGA-6724-3j3q-hq3rCGA-6c2r-5935-pgf3CGA-7387-m27w-qj2mCGA-76vj-q53p-vpj9CGA-7ggw-pp6h-x9rhCGA-8224-rrv2-3f9pCGA-893c-w2v6-78m8CGA-8cvx-65p8-m34pCGA-8f8h-mhxh-5625CGA-8m36-fwfg-4fw7CGA-93gj-m9mw-54vcCGA-974j-jqmx-gw26CGA-99wg-wjhf-wxffCGA-9fx8-xg9c-rvh6CGA-9mvc-fm4h-8678CGA-9rrx-hx2h-mj7fCGA-cq2f-xxxx-vff3CGA-cq73-xfhh-329hCGA-fpm6-frv2-v5fxCGA-fv7j-j35v-p9fgCGA-fw6h-w2hv-rrw3CGA-g654-rfrq-7gp8CGA-g7jp-94hq-mvm2CGA-h2hw-7rf6-8g3xCGA-h39j-rw74-r4c6CGA-h7f7-mhw9-wxp4CGA-hfgv-fwf6-6rh6CGA-hh92-rwhh-m2g6CGA-hmmx-4xwx-642vCGA-hmqw-vh7j-748xCGA-hqpv-w4xj-9vf8CGA-jfp9-49j9-r4g5CGA-m2r9-3v95-3j28CGA-m496-449h-v7p7CGA-m9gp-898j-2hqxCGA-p5jr-5g7x-mxfvCGA-p5r4-27x6-f3pfCGA-p9gp-5mcv-ghcvCGA-ppm2-87pj-pg46CGA-qcr3-mvcc-7rf9CGA-qjqh-2ccr-xg8wCGA-qq4h-hqcj-5r9fCGA-r75r-hmj4-253vCGA-v2m6-hhhf-xqppCGA-vcr4-j476-p97qCGA-vp5m-7x4g-7h9jCGA-vv93-4397-75wmCGA-w4mh-3pjf-xwx6CGA-w7rm-wgxg-m6jwCGA-x29g-wgc6-4f88CGA-x6m2-p735-vqqmCGA-xw5x-gxfx-7qv4CGA-xxqq-7466-wm9jopenSUSE-SU-2024:11309-1
Published 25-07-2017Last modified 06-08-2024
Vulnerability summary
CVE-2015-3243 is a medium (CVSS 5.5) vulnerability in rsyslog. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.9% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.0 (NVD)EPSS score
0.45%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 25-07-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 5.5Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NSourcesAll 4 agree
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · WolfiEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Low 2.1Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.45% on 21-09-2026
21-09-202621-10-2026
EPSS score0.45%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard36 products
- rsyslogAll versions (No fix recorded)
- rsyslog-clickhouseAll versions (No fix recorded)
- rsyslog-configAll versions (No fix recorded)
- rsyslog-cryptoAll versions (No fix recorded)
- rsyslog-docAll versions (No fix recorded)
Wolfi36 products
- rsyslogAll versions (No fix recorded)
- rsyslog-clickhouseAll versions (No fix recorded)
- rsyslog-configAll versions (No fix recorded)
- rsyslog-cryptoAll versions (No fix recorded)
- rsyslog-docAll versions (No fix recorded)
Suse5 products
- rsyslog&distro=SUSE Linux Enterprise Desktop 12 SP3< 8.24.0-3.3.1
- rsyslog&distro=SUSE Linux Enterprise Module for Basesystem 15< 8.33.1-3.3.1
- rsyslog&distro=SUSE Linux Enterprise Module for Server Applications 15< 8.33.1-3.3.1
- rsyslog&distro=SUSE Linux Enterprise Server 12 SP3< 8.24.0-3.3.1
- rsyslog&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 8.24.0-3.3.1
Debian1 product
- rsyslogAll versions (No fix recorded)
Opensuse1 product
- rsyslog&distro=openSUSE Tumbleweed< 8.2106.0-1.2
Rsyslog1 product
- rsyslogna
6 vendors · 80 products
References
11 links- www.openwall.com/lists/oss-security/2015/06/20/3Mailing ListX Refsource MLISTVDB EntryAdvisoryARTICLE
- bugzilla.redhat.com/show_bug.cgi?id=1232826X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB EntryAdvisoryREPORT
- www.openwall.com/lists/oss-security/2015/06/18/12Mailing ListX Refsource MLISTVDB EntryAdvisoryARTICLE
- bugzilla.suse.com/935393REPORT
