CVE-2011-4623

CVE-2011-4623 describes an integer overflow vulnerability in the rsyslog daemon, specifically within the rsCStrExtendBuf function in the imfile module. This flaw, affecting rsyslog versions 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4, allows a local attacker to trigger a heap-based buffer overflow by providing a large file. The successful exploitation of this vulnerability can lead to a denial of service, causing the rsyslog daemon to hang. The vulnerability has a low severity rating (CVSS 2.1 None, FAUCET Risk Score 5/100), indicating a local attack vector with low complexity and a potential impact limited to denial of service. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.