A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rsyslog-relpUpgrade rsyslog-udpspoofUpgrade rsyslog-docUpgrade rsyslog-gnutlsUpgrade rsyslog-kafkaUpgrade rsyslog-cryptoUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmjsonparseUpgrade rsyslogUpgrade rsyslog-libdbiUpgrade rsyslog-elasticsearchUpgrade rsyslog-gssapiUpgrade rsyslog-debuginfoUpgrade rsyslog-snmpUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetes | Apr 27, 2020 | Jan 25, 2019 |
| Centos_linux | — | Upgrade rsyslog-libdbiUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gssapiUpgrade rsyslog-mmkubernetesUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-mysqlUpgrade rsyslog-elasticsearchUpgrade rsyslog-cryptoUpgrade rsyslog-kafkaUpgrade rsyslog-pgsqlUpgrade rsyslog-mmauditUpgrade rsyslog-udpspoofUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-debuginfoUpgrade rsyslog-snmpUpgrade rsyslog-mmjsonparseUpgrade rsyslog-docUpgrade rsyslog-relp | Aug 28, 2019 | Jan 25, 2019 |
| Debian | — | Upgrade rsyslog | May 24, 2022 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-gssapiUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mysqlUpgrade rsyslog-relp | Feb 22, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslog-pgsqlUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-gssapi | Mar 27, 2019 | Jan 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-gnutlsUpgrade rsyslog-mysqlUpgrade rsyslog-pgsqlUpgrade rsyslog-gssapiUpgrade rsyslog | Mar 11, 2019 | Jan 25, 2019 |
| Oracle_linux | — | Upgrade rsyslog-mmnormalizeUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-mmauditUpgrade rsyslog-elasticsearchUpgrade rsyslog-udpspoofUpgrade rsyslog-pgsqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslog-kafkaUpgrade rsyslog-snmpUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-docUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-libdbiUpgrade rsyslog-relp | Aug 15, 2019 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-relpUpgrade rsyslog-snmpUpgrade rsyslog-libdbiUpgrade rsyslog-cryptoUpgrade rsyslog-mysqlUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetesUpgrade rsyslog-debuginfoUpgrade rsyslog-docUpgrade rsyslog-elasticsearchUpgrade rsyslog-udpspoofUpgrade rsyslogUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-kafkaUpgrade rsyslog-gssapi | Aug 7, 2019 | Jan 25, 2019 |
| Suse | — | Upgrade rsyslog-diag-toolsUpgrade rsyslog-module-udpspoofUpgrade rsyslog-module-mmnormalizeUpgrade rsyslog-module-pgsqlUpgrade rsyslogUpgrade rsyslog-module-mysqlUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-relpUpgrade rsyslog-docUpgrade rsyslog-module-snmpUpgrade rsyslog-module-gtls | Feb 1, 2019 | Jan 25, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Jan 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub