151 matches found
rsyslog security update
An update is available for rsyslog. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...
rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...
RHEL 9 : rsyslog (RHSA-2026:67583)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67583 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering o...
Important: Red Hat Security Advisory: rsyslog security update
An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
RHEL 10 : rsyslog (RHSA-2026:66405)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66405 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering ...
EUVD-2026-60067
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49307
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49307
CVE-2026-49307 describes a permission control vulnerability in the device’s multi-mode input module, affecting confidentiality. CVSS 3.1 base score 6.2 (MEDIUM); attack vector LOCAL, complexity LOW, privileges NONE, user interaction NONE, scope UNCHANGED, with confidentiality impact HIGH. There a...
CVE-2026-49307
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2026-73223
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49307: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
OPENSUSE-SU-2026:21535-1 Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...
SUSE-SU-2026:3498-1 Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. - Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...
CVE-2025-68968
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...
CVE-2025-68968
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...
CVE-2025-68968
CVE-2025-68968 is a double-free vulnerability in the multi-mode input module affecting Huawei HarmonyOS (and mirrored in multiple CVE trackers). Affected component: the multi-mode input module; root cause: double free in the input handling code, with the impact described as potentially affecting ...
CVE-2025-68968: Double Free
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...
EUVD-2024-52276
Malicious code in bioql PyPI...