CVE-2017-12588

Critical

Published: 06/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The zmq3 input and output modules in rsyslog before version 8.28.0 interpreted description fields as format strings, potentially allowing a format string attack with unspecified impact.

Risk Assessment

An attacker could exploit this vulnerability to carry out an attack, potentially leading to unauthorized access or data disclosure.

Recommendation

It is recommended to upgrade rsyslog to version 8.28.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.