{
  "cveId": "CVE-2014-3634",
  "url": "https://patchblox.com/security/cve/CVE-2014-3634",
  "summary": "CVE-2014-3634 is fixed in 21 products on 1 platform, first by ALAS2023-2023-001, released February 17, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "rsyslog: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2022-24903:\n\tA flaw w...",
  "description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2022-24903:\n\tA flaw was found in rsyslog\u0027s reception TCP modules. This flaw allows an attacker to craft a malicious message leading to a heap-based buffer overflow. This issue allows the attacker to corrupt or access data stored in memory, leading to a denial of service in the rsyslog or possible remote code execution.\n\nCVE-2014-3634:\n\tA flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, or a remote attacker able to connect to the rsyslog port, could use this flaw to crash the rsyslog daemon or, potentially in rsyslog 7.x, execute arbitrary code as the user running the rsyslog daemon.",
  "published": "2023-02-17T20:41:00Z",
  "severity": "important",
  "epss": 0.07546,
  "epssPercentile": 0.94553,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "rsyslog",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-crypto",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-crypto-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-doc",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-elasticsearch",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-elasticsearch-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-logrotate",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmaudit",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmaudit-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmfields",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmfields-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmjsonparse",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmjsonparse-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmkubernetes",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmkubernetes-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmnormalize",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-mmnormalize-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-openssl",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    },
    {
      "platform": "linux",
      "product": "rsyslog-openssl-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.2204.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-001",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-001",
      "released": "2023-02-17T20:41:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}