A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rsyslogUpgrade rsyslog-kafkaUpgrade rsyslog-cryptoUpgrade rsyslog-docUpgrade rsyslog-mmauditUpgrade rsyslog-gnutlsUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-pgsqlUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmkubernetesUpgrade rsyslog-libdbiUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslog-snmp | Apr 27, 2020 | Jan 25, 2019 |
| Centos_linux | — | Upgrade rsyslog-elasticsearchUpgrade rsyslog-gssapiUpgrade rsyslog-cryptoUpgrade rsyslog-kafkaUpgrade rsyslog-libdbiUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-snmpUpgrade rsyslog-relpUpgrade rsyslog-udpspoof | Aug 28, 2019 | Jan 25, 2019 |
| Debian | — | Upgrade rsyslog | May 24, 2022 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-relpUpgrade rsyslog-gssapiUpgrade rsyslog-gnutlsUpgrade rsyslog-pgsqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mysqlUpgrade rsyslog | Feb 22, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gssapi | Mar 27, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslogUpgrade rsyslog-pgsqlUpgrade rsyslog-mysqlUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relp | Mar 11, 2019 | Jan 25, 2019 |
| Oracle_linux | — | Upgrade rsyslog-udpspoofUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-gssapiUpgrade rsyslogUpgrade rsyslog-mmnormalizeUpgrade rsyslog-kafkaUpgrade rsyslog-elasticsearchUpgrade rsyslog-docUpgrade rsyslog-mmjsonparseUpgrade rsyslog-libdbiUpgrade rsyslog-relpUpgrade rsyslog-snmpUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-crypto | Aug 15, 2019 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-mmnormalizeUpgrade rsyslog-docUpgrade rsyslog-libdbiUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-cryptoUpgrade rsyslog-mysqlUpgrade rsyslog-snmpUpgrade rsyslog-relpUpgrade rsyslog-mmkubernetesUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmauditUpgrade rsyslog-kafkaUpgrade rsyslog-udpspoofUpgrade rsyslog-gssapiUpgrade rsyslog-pgsqlUpgrade rsyslog | Aug 7, 2019 | Jan 25, 2019 |
| Suse | — | Upgrade rsyslog-docUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-relpUpgrade rsyslog-module-snmpUpgrade rsyslog-module-mmnormalizeUpgrade rsyslogUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-udpspoofUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-mysql | Feb 1, 2019 | Jan 25, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Jan 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub