Elastic · Elasticsearch · CVE-2013-4758
**Name of the Vulnerable Software and Affected Versions**
rsyslog versions prior to 7.4.2
rsyslog versions prior to 7.5.2 devel
**Description**
The issue is related to a double free vulnerability in the writeDataError function within the ElasticSearch plugin (omelasticsearch) of rsyslog. This vulnerability can be exploited by remote attackers when the errorfile is set to local logging, allowing them to cause a denial of service (crash) and potentially execute arbitrary code via a crafted JSON response.
**Recommendations**
For versions prior to 7.4.2, update to version 7.4.2 or later.
For versions prior to 7.5.2 devel, update to version 7.5.2 devel or later.