CVE-2013-4758

no score yetEPSS 2.3%

rsyslog rsyslog: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days.

Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2013-10-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rsyslog:rsyslog

References

http://www.openwall.com/lists/oss-security/2013/07/05/2
http://www.rsyslog.com/rsyslog-7-4-2-v7-stable-released/
http://www.rsyslog.com/rsyslog-7-5-2-v7-devel-released/
http://www.openwall.com/lists/oss-security/2013/07/05/2
http://www.rsyslog.com/rsyslog-7-4-2-v7-stable-released/

Check your stack JSON