A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-docUpgrade rsyslog-mmnormalizeUpgrade rsyslogUpgrade rsyslog-kafkaUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-gnutlsUpgrade rsyslog-mmauditUpgrade rsyslog-cryptoUpgrade rsyslog-gssapiUpgrade rsyslog-mmkubernetesUpgrade rsyslog-relpUpgrade rsyslog-elasticsearchUpgrade rsyslog-mysqlUpgrade rsyslog-udpspoofUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-libdbi | Apr 27, 2020 | Jan 25, 2019 |
| Centos_linux | — | Upgrade rsyslog-kafkaUpgrade rsyslog-cryptoUpgrade rsyslog-mysqlUpgrade rsyslog-elasticsearchUpgrade rsyslog-libdbiUpgrade rsyslog-gssapiUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-udpspoofUpgrade rsyslog-pgsqlUpgrade rsyslog-mmauditUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relp | Aug 28, 2019 | Jan 25, 2019 |
| Debian | — | Upgrade rsyslog | May 24, 2022 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-relp | Feb 22, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-gnutlsUpgrade rsyslog-pgsqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mysqlUpgrade rsyslog-relp | Mar 27, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslog-mysqlUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslog-relpUpgrade rsyslog-mmjsonparse | Mar 11, 2019 | Jan 25, 2019 |
| Oracle_linux | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-mmauditUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mysqlUpgrade rsyslog-kafkaUpgrade rsyslogUpgrade rsyslog-udpspoofUpgrade rsyslog-mmkubernetesUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapiUpgrade rsyslog-docUpgrade rsyslog-mmjsonparseUpgrade rsyslog-snmpUpgrade rsyslog-libdbiUpgrade rsyslog-cryptoUpgrade rsyslog-relpUpgrade rsyslog-mmsnmptrapd | Aug 15, 2019 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade rsyslogUpgrade rsyslog-udpspoofUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-gssapiUpgrade rsyslog-kafkaUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-snmpUpgrade rsyslog-mmnormalizeUpgrade rsyslog-cryptoUpgrade rsyslog-mmkubernetesUpgrade rsyslog-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-docUpgrade rsyslog-libdbi | Aug 7, 2019 | Jan 25, 2019 |
| Suse | — | Upgrade rsyslogUpgrade rsyslog-module-mmnormalizeUpgrade rsyslog-module-mysqlUpgrade rsyslog-module-pgsqlUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-udpspoofUpgrade rsyslog-module-relpUpgrade rsyslog-module-gtlsUpgrade rsyslog-docUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-snmp | Feb 1, 2019 | Jan 25, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Jan 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub