Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2019-2937-1.NASL
HistoryNov 12, 2019 - 12:00 a.m.

SUSE SLED15 / SLES15 Security Update : rsyslog (SUSE-SU-2019:2937-1)

2019-11-1200:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15

9.7 High

AI Score

Confidence

High

JSON

This update for rsyslog fixes the following issues :

Security issues fixed :

CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).

CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).

Other issue addressed: Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:2937-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(130899);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/04/11");

  script_cve_id("CVE-2019-17041", "CVE-2019-17042");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : rsyslog (SUSE-SU-2019:2937-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for rsyslog fixes the following issues :

Security issues fixed :

CVE-2019-17041: Fixed a heap overflow in the parser for AIX log
messages (bsc#1153451).

CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log
messages (bsc#1153459).

Other issue addressed: Fixed an issue where rsyslog was SEGFAULT due
to a mutex double-unlock (bsc#1141063).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1141063");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1153451");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1153459");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-17041/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-17042/");
  # https://www.suse.com/support/update/announcement/2019/suse-su-20192937-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?7b667a1c");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Server Applications 15-SP1:zypper in
-t patch SUSE-SLE-Module-Server-Applications-15-SP1-2019-2937=1

SUSE Linux Enterprise Module for Server Applications 15:zypper in -t
patch SUSE-SLE-Module-Server-Applications-15-2019-2937=1

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15-SP1:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2937=1

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-2019-2937=1

SUSE Linux Enterprise Module for Basesystem 15-SP1:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-SP1-2019-2937=1

SUSE Linux Enterprise Module for Basesystem 15:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-2019-2937=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-17042");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/10/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/11/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/11/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-diag-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-diag-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-dbi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-dbi-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-elasticsearch");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-elasticsearch-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gcrypt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gcrypt-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gssapi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gssapi-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gtls");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-gtls-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-mmnormalize");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-mmnormalize-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-mysql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-mysql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omamqp1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omamqp1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omhttpfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omhttpfs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omtcl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-omtcl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-pgsql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-pgsql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-relp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-relp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-snmp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-udpspoof");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rsyslog-module-udpspoof-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0/1", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0/1", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-debugsource-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-diag-tools-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-diag-tools-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-doc-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-dbi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-dbi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-elasticsearch-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-elasticsearch-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gcrypt-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gcrypt-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gssapi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gssapi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gtls-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-gtls-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-mmnormalize-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-mmnormalize-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-mysql-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-mysql-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omamqp1-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omamqp1-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omhttpfs-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omhttpfs-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omtcl-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-omtcl-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-pgsql-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-pgsql-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-relp-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-relp-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-snmp-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-snmp-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-udpspoof-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"rsyslog-module-udpspoof-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-debugsource-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-diag-tools-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-diag-tools-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-doc-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-dbi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-dbi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-elasticsearch-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-elasticsearch-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gcrypt-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gcrypt-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gssapi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gssapi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gtls-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-gtls-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-mmnormalize-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-mmnormalize-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-mysql-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-mysql-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omamqp1-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omamqp1-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omhttpfs-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omhttpfs-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omtcl-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-omtcl-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-pgsql-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-pgsql-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-relp-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-relp-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-snmp-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-snmp-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-udpspoof-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rsyslog-module-udpspoof-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-debugsource-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-diag-tools-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-diag-tools-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-doc-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-dbi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-dbi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-elasticsearch-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-elasticsearch-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-gcrypt-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-gcrypt-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-mmnormalize-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-mmnormalize-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omamqp1-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omamqp1-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omhttpfs-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omhttpfs-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omtcl-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"rsyslog-module-omtcl-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-debugsource-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-diag-tools-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-diag-tools-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-doc-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-dbi-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-dbi-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-elasticsearch-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-elasticsearch-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-gcrypt-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-gcrypt-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-gtls-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-gtls-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-mmnormalize-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-mmnormalize-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omamqp1-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omamqp1-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omhttpfs-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omhttpfs-debuginfo-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omtcl-8.33.1-3.22.4")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rsyslog-module-omtcl-debuginfo-8.33.1-3.22.4")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "rsyslog");
}
VendorProductVersionCPE
novellsuse_linuxrsyslogp-cpe:/a:novell:suse_linux:rsyslog
novellsuse_linuxrsyslog-debuginfop-cpe:/a:novell:suse_linux:rsyslog-debuginfo
novellsuse_linuxrsyslog-debugsourcep-cpe:/a:novell:suse_linux:rsyslog-debugsource
novellsuse_linuxrsyslog-diag-toolsp-cpe:/a:novell:suse_linux:rsyslog-diag-tools
novellsuse_linuxrsyslog-diag-tools-debuginfop-cpe:/a:novell:suse_linux:rsyslog-diag-tools-debuginfo
novellsuse_linuxrsyslog-docp-cpe:/a:novell:suse_linux:rsyslog-doc
novellsuse_linuxrsyslog-module-dbip-cpe:/a:novell:suse_linux:rsyslog-module-dbi
novellsuse_linuxrsyslog-module-dbi-debuginfop-cpe:/a:novell:suse_linux:rsyslog-module-dbi-debuginfo
novellsuse_linuxrsyslog-module-elasticsearchp-cpe:/a:novell:suse_linux:rsyslog-module-elasticsearch
novellsuse_linuxrsyslog-module-elasticsearch-debuginfop-cpe:/a:novell:suse_linux:rsyslog-module-elasticsearch-debuginfo
Rows per page:
1-10 of 351

Related

suse 2
nessus 29
oraclelinux 2
centos 1
redhat 2
debian 2
openvas 12
ibm 2
osv 5
mageia 1
amazon 1
fedora 2
ubuntu 1
photon 6
prion 2
redhatcve 2
f5 2
ubuntucve 2
debiancve 2
alpinelinux 2
cve 2
suse
suse
Security update for rsyslog (moderate)
2019-11-13 00:00:00
Security update for rsyslog (moderate)
2019-11-14 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : rsyslog (EulerOS-SA-2019-2659)
2019-12-18 00:00:00
Oracle Linux 7 : rsyslog (ELSA-2020-1000)
2023-09-07 00:00:00
Amazon Linux 2 : rsyslog (ALAS-2020-1447)
2020-07-02 00:00:00
oraclelinux
oraclelinux
rsyslog security, bug fix, and enhancement update
2020-04-06 00:00:00
rsyslog security, bug fix, and enhancement update
2020-05-05 00:00:00
centos
centos
rsyslog security update
2020-04-08 19:16:23
redhat
redhat
(RHSA-2020:1000) Moderate: rsyslog security, bug fix, and enhancement update
2020-03-31 09:06:41
(RHSA-2020:1702) Moderate: rsyslog security, bug fix, and enhancement update
2020-04-28 09:06:43
debian
debian
[SECURITY] [DLA 1952-1] rsyslog security update
2019-10-10 00:12:14
[SECURITY] [DLA 2835-1] rsyslog security update
2021-11-30 23:36:30
openvas
openvas
Debian LTS: Security Advisory for rsyslog (DLA-1952-1)
2019-10-10 00:00:00
Huawei EulerOS: Security Advisory for rsyslog (EulerOS-SA-2019-2418)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for rsyslog (EulerOS-SA-2020-1276)
2020-03-19 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Rsyslog affect IBM Spectrum Protect Plus (CVE-2019-17041, CVE-2019-17042)
2020-08-31 19:31:37
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-08-13 22:15:02
osv
osv
rsyslog - security update
2019-10-09 00:00:00
rsyslog - security update
2021-11-30 00:00:00
rsyslog vulnerabilities
2022-05-12 08:43:35
mageia
mageia
Updated rsyslog packages fix security vulnerabilities
2019-12-19 16:44:26
amazon
amazon
Medium: rsyslog
2020-06-26 22:55:00
fedora
fedora
[SECURITY] Fedora 31 Update: rsyslog-8.1911.0-1.fc31
2019-11-22 00:48:23
[SECURITY] Fedora 30 Update: rsyslog-8.1911.0-1.fc30
2019-11-24 01:15:08
ubuntu
ubuntu
Rsyslog vulnerabilities
2022-05-12 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2019-0256
2019-10-31 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0184
2019-10-23 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0254
2019-10-18 00:00:00
prion
prion
Heap overflow
2019-10-07 16:15:00
Heap overflow
2019-10-07 16:15:00
redhatcve
redhatcve
CVE-2019-17042
2020-04-03 02:09:53
CVE-2019-17041
2019-10-29 16:55:56
f5
f5
K12213311 : Rsyslog v8.1908.0.0 vulnerability CVE-2019-17041
2020-01-15 00:00:00
K39081000 : Rsyslog vulnerability CVE-2019-17042
2020-01-30 00:00:00
ubuntucve
ubuntucve
CVE-2019-17041
2019-10-07 00:00:00
CVE-2019-17042
2019-10-07 00:00:00
debiancve
debiancve
CVE-2019-17041
2019-10-07 16:15:00
CVE-2019-17042
2019-10-07 16:15:00
alpinelinux
alpinelinux
CVE-2019-17041
2019-10-07 16:15:00
CVE-2019-17042
2019-10-07 16:15:00
cve
cve
CVE-2019-17042
2019-10-07 16:15:00
CVE-2019-17041
2019-10-07 16:15:00

9.7 High

AI Score

Confidence

High

JSON
Related for SUSE_SU-2019-2937-1.NASL
suse2nessus29oraclelinux2centos1redhat2debian2openvas12ibm2osv5mageia1amazon1fedora2ubuntu1photon6prion2redhatcve2f52ubuntucve2debiancve2alpinelinux2cve2