Shanghai’s Censors Can’t Hide Stories of the Dead

Many people reportedly died after struggling to access medical care during a brutal lockdown. The families want to make sure these deaths are counted...

Amazon Linux AMI : rsyslog (ALAS-2022-1594)

The version of rsyslog installed on the remote host is prior to 5.8.10-9.29. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1594 advisory. A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local...

Amazon Linux 2 : rsyslog (ALAS-2022-1803)

The version of rsyslog installed on the remote host is prior to 8.24.0-57. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1803 advisory. A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local...

Debian DSA-5150-1 : rsyslog - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5150 advisory. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This...

Oracle Linux 7 : rsyslog (ELSA-2022-4803)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4803 advisory. 8.24.0-57.0.4.el79.3 - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler 8.24.0-57.3 - Address CVE-2022-24903,...

Oracle Linux 8 : rsyslog (ELSA-2022-4799)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4799 advisory. 8.2102.0-7.1 - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz2081400 Tenable has extracted the preceding description block...

OESA-2022-1672 rsyslog security update

RSYSLOG is the rocket-fast system for log processing.It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transfo...

SUSE SLES15: rsyslog / rsyslog-module-gssapi / rsyslog-module-gtls / etc (SUSE-SU-2022:1817-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1817-1 advisory. - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception bsc1199061. Tenable has extracted the preceding...

Debian DLA-3016-1 : rsyslog - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3016 advisory. - A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would...

Ubuntu 16.04 ESM : Rsyslog vulnerability (USN-5404-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5404-2 advisory. USN-5404-1 addressed a vulnerability in Rsyslog. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding descripti...

CLSA-2022-1652706523 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix potential buffer overrun when using octet-counted framing...

CLSA-2022-1652706426 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix potential buffer overrun when using octet-counted framing...

SUSE SLED15: rsyslog / rsyslog-diag-tools / rsyslog-doc / rsyslog-module-dbi / etc (SUSE-SU-2022:1583-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1583-1 advisory. - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception bsc1199061...

FreeBSD : rsyslog8 -- heap buffer overflow on receiving TCP syslog (b9837fa1-cd72-11ec-98f1-6805ca0b3d42)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b9837fa1-cd72-11ec-98f1-6805ca0b3d42 advisory. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential...

DEBIAN-CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

ALPINE-CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

AZL-9736 CVE-2022-24903 affecting package rsyslog for versions less than 8.2204.1-1

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

Heap overflow

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Rsyslog vulnerability (USN-5404-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5404-1 advisory. Pieter Agten discovered that Rsyslog incorrectly handled certain requests. An attacker could possibly use this issue to cause a crash...