rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Important: Red Hat Security Advisory: rsyslog security, bug fix, and enhancement update

An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Important: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2019-17041

Rsyslog - what is it? Rsyslog is a r ocket-fast sys tem for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide...

CVE-2026-59310-POC

CVE-2026-59310 — VMware vCenter Syslog Directory Traversal Leading to Unauthenticated RCE Disclaimer : This project is intended solely for authorized security testing, vulnerability verification, and defensive research. Please use it only in environments where you have obtained explicit written...

rsyslog-librelp-CVE-2018-1000140-fixed

This repository does not have a README...

rsyslog-librelp-CVE-2018-1000140

This repository does not have a README...

Security update for rsyslog

This update for rsyslog fixes the following issues: imdtls permitted-peer authorization bypass bsc1281628. Changes for rsyslog: Upgrade to version 8.2608.0 bsc1257604 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa A practical hands-on lab demonstrating the rsyslog heap buffer overflow vulnerability. A practical lab environment to reproduce and understand the rsyslog Heap Buffer Overflow vulnerability CVE-2022-24903 via octet-counted framing in TCP...

openSUSE 16: rsyslog / rsyslog-devel / rsyslog-diag-tools / etc (openSUSE-SU-2026:22019-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22019-1 advisory. This update for rsyslog fixes the following issue: - imdtls: fix permitted-peer authorization bypass bsc1281628. Tenable has extracted the preceding...

OPENSUSE-SU-2026:22019-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - imdtls: fix permitted-peer authorization bypass bsc1281628...

CVE-2026-78002 affecting package rsyslog for versions less than 8.2308.0-7

CVE-2026-78002 affecting package rsyslog for versions less than 8.2308.0-7. A patched version of the package is available...

Exploit for Incorrect Implementation of Authentication Algorithm in Vmware Vcenter_Server

VC-Strike VMware vCenter Integrated Authorization Penetrati...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2022_4795)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224795 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.2:CLSA-2026:1788196350)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788196350 advisory. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Rocky Linux 8 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2022_4799)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224799 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ciqsa-2026_1528)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261528 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-19654. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1788424971)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788424971 advisory. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...