{"schemaVersion":3,"id":"USN-2381-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"rsyslog vulnerabilities\n\nIt was discovered that Rsyslog incorrectly handled invalid PRI values. An\nattacker could use this issue to send malformed messages to the Rsyslog\nserver and cause it to stop responding, resulting in a denial of service\nand possibly message loss. (CVE-2014-3634, CVE-2014-3683)","dates":{"published":"2014-10-09T16:42:05.000Z","modified":"2026-02-10T04:40:50.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"rsyslog","name":"rsyslog","label":"rsyslog","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rsyslog","purlType":"deb","versions":[{"text":"< 7.4.4-1ubuntu2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.4-1ubuntu2.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-2381-1","label":"ubuntu.com/security/notices/USN-2381-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3634","label":"ubuntu.com/security/CVE-2014-3634","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-3683","label":"ubuntu.com/security/CVE-2014-3683","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2014-3634","CVE-2014-3683"],"downstream":[],"duplicates":[],"related":["CVE-2014-3634","CVE-2014-3683"]},"timeline":[{"kind":"published","date":"2014-10-09T16:42:05.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:40:50.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:20:19.440Z","stale":false,"partial":false}}