CVE-2022-24903

🗓️ 05 May 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 491 Views🌐 WEB

Rsyslog: potential heap buffer overflow in TCP syslog receptio

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	15 Apr 202502:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in rsyslog [ CVE-2022-24903]	28 Mar 202421:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in rsyslog (CVE-2022-24903).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Access Appliance includes components with known vulnerabilities	12 Jan 202323:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by several vulnerabilities	19 Sep 202319:45	–	ibm
GithubExploit	Exploit for Classic Buffer Overflow in Rsyslog	30 Jul 202621:47	–	githubexploit
Tenable Nessus	Amazon Linux 2022 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2022-2022-075)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : rsyslog (ALAS2022-2022-211)	9 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2023-2023-001)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : rsyslog (ALAS-2022-1803)	7 Jun 202200:00	–	nessus

NVD

Vulners

Node

rsyslog rsyslogRange<8.2204.1

Node

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

[
  {
    "vendor": "rsyslog",
    "product": "rsyslog",
    "versions": [
      {
        "version": "< 8.2204.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rsyslog/rsyslog/commit/f211042ecbb472f9d8beb4678a65d272b6f07705
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMNNXLCU2UORRVSZO24HL4KMVPK5PHVW/
debian	www.debian.org/security/2022/dsa-5150
security	www.security.netapp.com/advisory/ntap-20221111-0002/
github	www.github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
lists	www.lists.debian.org/debian-lts-announce/2022/05/msg00028.html

Parameter	Position	Path	Description	CWE
octet-count prefix digits	binary	192.168.56.20:514	rsyslog TCP syslog reception with octet-counted framing vulnerability (CVE-2022-24903) via oversized octet-count prefix causing heap buffer overflow	CWE-120, CWE-1284