CVE-2017-12588 - Vulnerability Details - OpenCVE

The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Rsyslog	Rsyslog

Configuration 1 [-]

cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b
https://github.com/rsyslog/rsyslog/pull/1565
https://nvd.nist.gov/vuln/detail/CVE-2017-12588
https://security.netapp.com/advisory/ntap-20241227-0009/
https://www.cve.org/CVERecord?id=CVE-2017-12588

History

Fri, 27 Dec 2024 16:45:00 +0000

Type	Values Removed	Values Added
References		https://security.netapp.com/advisory/ntap-20241227-0009/

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-08-06T14:00:00

Updated: 2024-12-27T16:02:55.291Z

Reserved: 2017-08-06T00:00:00

Link: CVE-2017-12588

Vulnrichment

No data.

NVD

Status : Modified

Published: 2017-08-06T14:29:00.227

Modified: 2024-12-27T16:15:21.503

Link: CVE-2017-12588

Redhat

Severity : Moderate

Publid Date: 2017-08-02T00:00:00Z

Links: CVE-2017-12588 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-08-06T00:00:00", "descriptions": [{"lang": "en", "value": "The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-06T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rsyslog/rsyslog/pull/1565"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-12588", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/rsyslog/rsyslog/pull/1565", "refsource": "CONFIRM", "url": "https://github.com/rsyslog/rsyslog/pull/1565"}, {"name": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b", "refsource": "CONFIRM", "url": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}, {"name": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog", "refsource": "CONFIRM", "url": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"}]}}}, "adp": [{"title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/rsyslog/rsyslog/pull/1565"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"}, {"url": "https://security.netapp.com/advisory/ntap-20241227-0009/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-12-27T16:02:55.291Z"}}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-12588", "datePublished": "2017-08-06T14:00:00", "dateReserved": "2017-08-06T00:00:00", "dateUpdated": "2024-12-27T16:02:55.291Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*", "matchCriteriaId": "43786829-C62D-4802-A45E-19C23E1A8DBA", "versionEndIncluding": "8.27.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact."}, {"lang": "es", "value": "Los m\u00f3dulos de entrada y salida de zmq3 en versiones de rsyslog anteriores a 8.28.0 interpretaban campos de descripci\u00f3n como cadenas de formato, lo que pod\u00eda dar lugar a un ataque de tipo \u201cformat string\u201d y causar un impacto no especificado."}], "id": "CVE-2017-12588", "lastModified": "2024-12-27T16:15:21.503", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-08-06T14:29:00.227", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/pull/1565"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/rsyslog/rsyslog/pull/1565"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20241227-0009/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-134"}], "source": "nvd@nist.gov", "type": "Primary"}]}