A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rsyslog-kafkaUpgrade rsyslog-gnutlsUpgrade rsyslog-mmnormalizeUpgrade rsyslogUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-snmpUpgrade rsyslog-libdbiUpgrade rsyslog-mysqlUpgrade rsyslog-udpspoofUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmkubernetesUpgrade rsyslog-gssapi | Apr 27, 2020 | Jan 25, 2019 |
| Centos_linux | — | Upgrade rsyslog-docUpgrade rsyslog-relpUpgrade rsyslog-mmjsonparseUpgrade rsyslog-pgsqlUpgrade rsyslog-snmpUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-udpspoofUpgrade rsyslog-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetesUpgrade rsyslogUpgrade rsyslog-libdbiUpgrade rsyslog-elasticsearchUpgrade rsyslog-kafkaUpgrade rsyslog-cryptoUpgrade rsyslog-gssapi | Aug 28, 2019 | Jan 25, 2019 |
| Debian | — | Upgrade rsyslog | May 24, 2022 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-relpUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-pgsql | Feb 22, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-relpUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapiUpgrade rsyslog | Mar 27, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-mysqlUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relp | Mar 11, 2019 | Jan 25, 2019 |
| Oracle_linux | — | Upgrade rsyslog-mmnormalizeUpgrade rsyslog-kafkaUpgrade rsyslog-udpspoofUpgrade rsyslog-mmauditUpgrade rsyslog-gssapiUpgrade rsyslog-pgsqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-elasticsearchUpgrade rsyslog-mysqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-libdbiUpgrade rsyslog-snmpUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-relpUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-doc | Aug 15, 2019 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade rsyslog-gssapiUpgrade rsyslog-udpspoofUpgrade rsyslog-kafkaUpgrade rsyslogUpgrade rsyslog-pgsqlUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmauditUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-gnutlsUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-mmkubernetesUpgrade rsyslog-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-libdbiUpgrade rsyslog-snmp | Aug 7, 2019 | Jan 25, 2019 |
| Suse | — | Upgrade rsyslog-module-udpspoofUpgrade rsyslog-diag-toolsUpgrade rsyslogUpgrade rsyslog-module-mysqlUpgrade rsyslog-module-mmnormalizeUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-snmpUpgrade rsyslog-module-relpUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-gssapiUpgrade rsyslog-doc | Feb 1, 2019 | Jan 25, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Jan 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub