CVE-2013-4758: Rsyslog

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.

Affected products

• Rsyslog Rsyslog: up to and including 7.4.1; up to and including 7.5.1; version 6.4.2 only; version 6.5.1 only; version 6.6.0 only; version 7.1.0 only; …

Published 2013-10-04. Last modified 2026-06-16.