CVE-2019-17041

Rsyslog - それは何ですか？ Rsyslogは超高速 なログ 処理システム です。 高性能、優れたセキュリティ機能、そしてモジュラー設計を提供します。 通常のsyslogdとして始まりましたが、rsyslogはログ処理のスイスアーミーナイフのようなものに進化し、多種多様なソースからの入力を受け付け、変換し、結果をさまざまな宛先に出力することができます。 Rsyslogは、限定的な処理を適用した場合（v7ベース、2013年12月）、毎秒100万以上のメッセージをローカル宛先に配信できます。リモート宛先やより複雑な処理でも、そのパフォーマンスは通常「驚異的」と見なされています。...

rsyslog security update

8.2510.0-2.0.1.el98.2 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against...

USN-8786-1: rsyslog vulnerability

It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service...

OESA-2026-3934 rsyslog security update

RSYSLOG is the rocket-fast system for log processing.It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transfo...

rsyslog-librelp-CVE-2018-1000140-fixed

이 저장소에는 README가 없습니다...

rsyslog-librelp-CVE-2018-1000140

이 저장소에는 README가 없습니다...

CVE-2026-61548

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

AZL-103314 CVE-2026-61548 affecting package rsyslog 8.2308.0-6

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2026-61548

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

CVE-2026-61548 Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

CVE-2026-61548 Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

CVE-2026-61548

Rsyslog (a log processing system) versions 7.5.4 through 8.2606.0 contain a stack buffer overflow in the optional mmpstrucdata plugin. The parseSD_PARAM function stores RFC5424 parameter values in a fixed 32 KB stack buffer and calls parsePARAM_VALUE without supplying the destination size. A remo...

CVE-2026-55556

Rsyslog versions 8.2110.0 through 8.2604.0 are affected by a heap buffer overflow in the optional imhttp module's parse_auth_header function (contrib/imhttp/imhttp.c). When an HTTP Basic Authorization value exceeds the fixed work buffer, calloc(0, len) allocates a zero-byte heap buffer that is th...

CVE-2026-55556 Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2026-55556 Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 핸즈온 랩 저자: Andrew Beshay Mousa rsyslog 힙 버퍼 오버플로 취약점을 시연하는 실용적인 핸즈온 랩입니다. TCP syslog 수신 시 octet-counted framing을 통해 rsyslog 힙 버퍼 오버플로 취약점CVE-2022-24903을 재현하고 이해할 수 있는 실용적인 랩 환경입니다. Table of Contents 개요 랩 아키텍처 사전 요구사항 취약점 상세 랩 설정 대상 머신 Ubuntu 공격자 머신 Kali 익스플로잇 검증 문제 해결 완화 조치 참고 자료 개요...

MiracleLinux 9 : rsyslog-8.2510.0-2.el9_8.1 (AXSA:2026-1860:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1860:02 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...