{"id":"CVE-2017-12588","details":"The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.","modified":"2026-07-08T16:53:47.185372Z","published":"2017-08-06T14:29:00.227Z","references":[{"type":"ADVISORY","url":"https://github.com/rsyslog/rsyslog/blob/master/ChangeLog"},{"type":"ADVISORY","url":"https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20241227-0009/"},{"type":"FIX","url":"https://github.com/rsyslog/rsyslog/pull/1565"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rsyslog/rsyslog","events":[{"introduced":"0"},{"last_affected":"063f4701e36dbc2ae5ee2dfe980319f28a00c464"},{"fixed":"062d0c671a29f7c6f7dff4a2f1f35df375bbb30b"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"8.27.0"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*"}}],"versions":["v8.25.0","v8.27.0","v8.26.0","v8.24.0","v8.23.0","v8.22.0","v8.21.0","v8.20.0","v8.19.0","v8.18.0","v8.13.0","v8.12.0","v8.10.0","v8.9.0","v8.4.2","v8.4.1","v8.4.0","v8.3.5","v8.3.4","v8.3.3","v8.3.2","v8.3.1","v8.3.0","v8.1.6","v7.5.3","v7.5.2","v7.5.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12588.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}