Vulnerability in Gentoo Logrotate

CVE-2011-1155

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demons…

EPSS: 0.001 (27.0th percentile) — read the EPSS interpretation.

Affected products

Gentoo Logrotate — versions 3.3, 3.5.9, 3.6.5
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST, Patch)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
43955 (x_refsource_SECUNIA, third-party-advisory)
[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)