SUSE SLED15: rsyslog / rsyslog-module-gssapi / rsyslog-module-gtls / etc (SUSE-SU-2026:3478-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3478-1 advisory. - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. ...

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

SUSE-SU-2026:3478-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. - Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

USN-8598-1: rsyslog vulnerabilities

It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled oversized RFC5424 structured data in the...

USN-8598-1 rsyslog vulnerabilities

It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled oversized RFC5424 structured data in the...

PT-2026-64216

Name of the Vulnerable Software and Affected Versions rsyslog affected versions not specified Description Two issues were identified in rsyslog. First, the imptcp module incorrectly handles regex-based TCP framing, which could allow a remote attacker to cause the service to crash. Second, a stack...

MiracleLinux 7 : rsyslog-8.24.0-38.el7 (AXSA:2019-4243:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4243:02 advisory. rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled CVE-2018-16881 Tenable has extracted the preceding description block directly fro...

EUVD-2018-8671

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-16881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which woul...

CentOS 9 : rsyslog-8.2102.0-111.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the rsyslog-8.2102.0-111.el9 build changelog. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted...

Oracle Linux 7 : rsyslog (ELSA-2019-2110)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2110 advisory. 8.24.0-38.0.2 - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler 8.24.0-38 RHEL 7.7 ERRATUM - added patch...

EulerOS Virtualization 3.0.6.0 : rsyslog (EulerOS-SA-2022-2587)

According to the versions of the rsyslog packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when...

SUSE SLES12 Security Update : rsyslog (SUSE-SU-2022:2314-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2314-1 advisory. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when...

CLSA-2022-1653917271 Fix CVE(s): CVE-2022-24903

SECURITY UPDATE: heap buffer overflow - debian/patches/CVE-2022-24903.patch: introduces a bounds check to address a potential heap buffer overflow in plugins/imptcp/imptcp.c. - CVE-2022-24903...

CLSA-2022-1652706309 Fix CVE(s): CVE-2019-17041, CVE-2019-17042, CVE-2018-16881

SECURITY UPDATE: denial of dervice - debian/patches/CVE-2018-16881.patch: introduces a frame size check in the processDataRcvd function of plugins/imptcp/imptcp.c. - CVE-2018-16881 SECURITY UPDATE: heap-based overflow - debian/patches/CVE-2019-17041.patch: adds length checks for invalid AIX log...

Ubuntu 16.04 ESM : Rsyslog vulnerabilities (USN-5419-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5419-1 advisory. It was discovered that Rsyslog improperly handled certain invalid input. An attacker could use this issue to cause Rsyslog to crash. Tenable has extracte...

ALPINE-CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

AZL-9736 CVE-2022-24903 affecting package rsyslog for versions less than 8.2204.1-1

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...