vulnerability

CentOS Linux: CVE-2018-16881: Moderate: rsyslog security and bug fix update (CESA-2019:2110)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Jan 25, 2019
Added
Aug 28, 2019
Modified
May 25, 2023

Description

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Solution(s)

centos-upgrade-rsyslogcentos-upgrade-rsyslog-cryptocentos-upgrade-rsyslog-debuginfocentos-upgrade-rsyslog-doccentos-upgrade-rsyslog-elasticsearchcentos-upgrade-rsyslog-gnutlscentos-upgrade-rsyslog-gssapicentos-upgrade-rsyslog-kafkacentos-upgrade-rsyslog-libdbicentos-upgrade-rsyslog-mmauditcentos-upgrade-rsyslog-mmjsonparsecentos-upgrade-rsyslog-mmkubernetescentos-upgrade-rsyslog-mmnormalizecentos-upgrade-rsyslog-mmsnmptrapdcentos-upgrade-rsyslog-mysqlcentos-upgrade-rsyslog-pgsqlcentos-upgrade-rsyslog-relpcentos-upgrade-rsyslog-snmpcentos-upgrade-rsyslog-udpspoof
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.