CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 动手实验 作者： Andrew Beshay Mousa 一个演示 rsyslog 堆缓冲区溢出漏洞的实操实验。 一个实用的实验室环境，用于通过 TCP syslog 接收中的八位字节计数帧（octet-counted framing）复现并理解 rsyslog 堆缓冲区溢出 漏洞（CVE-2022-24903）。 目录 概述 实验架构 前提条件 漏洞详情 实验环境搭建 目标机器（Ubuntu） 攻击者机器（Kali） 漏洞利用 验证 故障排除 缓解措施 参考资料 概述 CVE-2022-24903 是 rsyslog 的 TCP syslog...

CentOS Linux 8.5 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.5:CLSA-2026:1788815237)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1788815237 advisory. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Rocky Linux 8.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc Multiple Vulnerabilities (ciqsa-2026_1510)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261510 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2022-24903, CVE-2026-78002. Tenable has extracted t...

Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ciqsa-2026_1528)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261528 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-19654. Tenable has extracted the preceding description...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2019-17041

Rsyslog - 它是什么？ Rsyslog 是一个火 箭般高速的系统日志 处理系统 。 它提供了高性能、出色的安全特性和模块化设计。 虽然它最初只是一个普通的 syslogd，但 rsyslog 已演变成一种日志处理的瑞士军刀， 能够接受来自各种来源的输入，进行转换，并将结果输出到不同的目的地。 在应用有限处理的情况下（基于 v7，2013 年 12 月），rsyslog 可以每秒向本地目标交付超过一百万条消息。 即使对于远程目标和更复杂的处理，其性能通常也被认为是“令人惊叹的”。 邮件列表...

CVE-2026-93402

A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...

CVE-2026-59310-POC

CVE-2026-59310 — VMware vCenter Syslog Directory Traversal que conduce a RCE no autenticado Descargo de responsabilidad : Este proyecto está destinado únicamente a pruebas de seguridad autorizadas , validación de vulnerabilidades e investigación defensiva. Úselo en entornos con autorización escri...

rsyslog-librelp-CVE-2018-1000140-fixed

Este repositorio no tiene un README...

rsyslog-librelp-CVE-2018-1000140

此存储库没有 README。...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

RLSA-2026:69540 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

RockyLinux 9 : rsyslog (RLSA-2026:69540)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description bloc...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

The Ansible Automation Platform automation controller is vulnerable to an injection flaw in its external logging (rsyslog ) configuration. The system generates configuration files by interpolating user-controlled settings—specifically LOG_AGGREGATOR_HOST , LOG_AGGREGATOR_MAX_DISK_USAGE_PATH , and...

EUVD-2026-85607

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...