A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rsyslogUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-kafkaUpgrade rsyslog-gnutlsUpgrade rsyslog-pgsqlUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmauditUpgrade rsyslog-mmjsonparseUpgrade rsyslog-cryptoUpgrade rsyslog-docUpgrade rsyslog-udpspoofUpgrade rsyslog-snmpUpgrade rsyslog-relpUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mysqlUpgrade rsyslog-gssapiUpgrade rsyslog-libdbiUpgrade rsyslog-debuginfo | Apr 27, 2020 | Jan 25, 2019 |
| Centos_linux | — | Upgrade rsyslog-mmauditUpgrade rsyslog-udpspoofUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-pgsqlUpgrade rsyslog-docUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-cryptoUpgrade rsyslog-libdbiUpgrade rsyslog-mmnormalizeUpgrade rsyslog-elasticsearchUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslog-kafka | Aug 28, 2019 | Jan 25, 2019 |
| Debian | — | Upgrade rsyslog | May 24, 2022 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-mysqlUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapiUpgrade rsyslog-relp | Feb 22, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslog-gssapiUpgrade rsyslogUpgrade rsyslog-pgsqlUpgrade rsyslog-relpUpgrade rsyslog-mysqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gnutls | Mar 27, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-gnutlsUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-mysql | Mar 11, 2019 | Jan 25, 2019 |
| Oracle_linux | — | Upgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-snmpUpgrade rsyslog-cryptoUpgrade rsyslog-libdbiUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-kafkaUpgrade rsyslog-mmnormalizeUpgrade rsyslog-pgsqlUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmauditUpgrade rsyslog-gssapiUpgrade rsyslog-udpspoofUpgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mysqlUpgrade rsyslog | Aug 15, 2019 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-mmkubernetesUpgrade rsyslog-docUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-snmpUpgrade rsyslog-relpUpgrade rsyslog-cryptoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-debuginfoUpgrade rsyslog-libdbiUpgrade rsyslog-mmnormalizeUpgrade rsyslog-pgsqlUpgrade rsyslog-mmauditUpgrade rsyslogUpgrade rsyslog-elasticsearchUpgrade rsyslog-udpspoofUpgrade rsyslog-gssapiUpgrade rsyslog-kafka | Aug 7, 2019 | Jan 25, 2019 |
| Suse | — | Upgrade rsyslog-module-mysqlUpgrade rsyslog-module-mmnormalizeUpgrade rsyslogUpgrade rsyslog-module-udpspoofUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-gtlsUpgrade rsyslog-docUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-relpUpgrade rsyslog-module-snmp | Feb 1, 2019 | Jan 25, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Jan 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub