CVE-2011-3626: Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsur

Q: How do I fix CVE-2011-3626?

logsurfer: upgrade to newer than 1.5b; logsurfer\+: upgrade to newer than 1.7. Exact commands for each OS are on this page.

Q: Is CVE-2011-3626 being exploited?

CVE-2011-3626 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2011-3626 affect?

CVE-2011-3626 affects logsurfer, logsurfer\+. Severity is high (CVSS 7.5). Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

This month

HIGH 7.5UPGRADEUPGRADE

CVE-2011-3626 is a high-severity flaw (CVSS 7.5) affecting logsurfer, logsurfer\+. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.5 (High)
EPSS exploit chance	2.1% (top 18%)
CISA exploited list	No
Weakness	CWE-399
Published	2012-01-27
Last modified	2026-06-16

Publisher (CNA): Red Hat, Inc. · Vendor: drusus · kerry thompson

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2012-01-27 15:55 UTCPublished CVE record published
2026-06-16 23:33 UTCUpdated Record last modified

drusus logsurfer UPGRADE

Affected: <= 1.5b · 1.1 · 1.2 · 1.3 · 1.4 · 1.5 · 1.5 beta · 1.5 beta2

Fixed in: newer than 1.5b

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy logsurfer || rpm -q logsurfer || logsurfer --version

2. UPGRADE to newer than 1.5b (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade logsurfer

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade logsurfer

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

kerry thompson logsurfer\+ UPGRADE

Affected: <= 1.7 · 1.5a · 1.5b · 1.6 · 1.6a · 1.6b

Fixed in: newer than 1.7

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy logsurfer+ || rpm -q logsurfer+ || logsurfer+ --version

2. UPGRADE to newer than 1.7 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade logsurfer+

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade logsurfer+

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2011-3626?

logsurfer: upgrade to newer than 1.5b; logsurfer\+: upgrade to newer than 1.7. Exact commands for each OS are on this page.

Is CVE-2011-3626 being exploited?

CVE-2011-3626 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2011-3626 affect?

CVE-2011-3626 affects logsurfer, logsurfer\+. Severity is high (CVSS 7.5). Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

How urgent is CVE-2011-3626?

Priority 47/100. High severity

Related CVEs

CVE-2002-1889 MEDIUM 5.0 DOWNGRADE Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows r

References

← Back to latest CVEs