An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon) but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rsyslog | Nov 8, 2019 | Oct 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rsyslog-libdbiUpgrade rsyslog-mysqlUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-gssapiUpgrade rsyslog-cryptoUpgrade rsyslog-kafkaUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmkubernetesUpgrade rsyslog-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-mmauditUpgrade rsyslog-docUpgrade rsyslog-relpUpgrade rsyslog-pgsqlUpgrade rsyslog-mmjsonparseUpgrade rsyslog-snmp | Jul 2, 2020 | Oct 7, 2019 |
| Centos_linux | — | Upgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-snmpUpgrade rsyslog-docUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslog-cryptoUpgrade rsyslog-elasticsearchUpgrade rsyslog-libdbiUpgrade rsyslogUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-debuginfoUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetesUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-pgsqlUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-gssapiUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-kafkaUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mmaudit | Apr 1, 2020 | Oct 7, 2019 |
| Debian | — | Upgrade rsyslog | Oct 11, 2019 | Oct 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-gnutls | Dec 4, 2019 | Oct 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rsyslog-mmjsonparseUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-pgsqlUpgrade rsyslog-gnutlsUpgrade rsyslogUpgrade rsyslog-gssapi | Dec 18, 2019 | Oct 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsyslog-relpUpgrade rsyslog-mmjsonparseUpgrade rsyslog-pgsqlUpgrade rsyslog-mysqlUpgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-gnutls | Nov 19, 2019 | Oct 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapiUpgrade rsyslog-mysqlUpgrade rsyslog-relp | Nov 28, 2019 | Oct 7, 2019 |
| Oracle Solaris | — | Upgrade system/rsyslog to version 8.2002.0-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Oct 7, 2019 |
| Oracle_linux | — | Upgrade rsyslog-mmkubernetesUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmnormalizeUpgrade rsyslog-relpUpgrade rsyslog-snmpUpgrade rsyslog-libdbiUpgrade rsyslog-udpspoofUpgrade rsyslog-mysqlUpgrade rsyslog-mmauditUpgrade rsyslog-gssapiUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-docUpgrade rsyslog-cryptoUpgrade rsyslog-kafkaUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-elasticsearch | Apr 9, 2020 | Sep 30, 2019 |
| Redhat_linux | — | Upgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-pgsql-debuginfoNo solution existsUpgrade rsyslog-relpUpgrade rsyslog-gssapiUpgrade rsyslog-udpspoofUpgrade rsyslog-snmpUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-gnutlsUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-kafkaUpgrade rsyslog-docUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-libdbiUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-cryptoUpgrade rsyslog-debuginfo | Apr 1, 2020 | Oct 7, 2019 |
| Suse | — | Upgrade rsyslog-module-omamqp1Upgrade rsyslog-module-mmnormalizeUpgrade rsyslog-module-dbiUpgrade rsyslog-module-udpspoofUpgrade rsyslog-module-gcryptUpgrade rsyslog-module-omtclUpgrade rsyslog-module-gtlsUpgrade rsyslog-module-mysqlUpgrade rsyslog-docUpgrade rsyslog-module-pgsqlUpgrade rsyslog-module-snmpUpgrade rsyslogUpgrade rsyslog-diag-toolsUpgrade rsyslog-module-elasticsearchUpgrade rsyslog-module-relpUpgrade rsyslog-module-gssapiUpgrade rsyslog-module-omhttpfs | Nov 14, 2019 | Oct 7, 2019 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro) | May 13, 2022 | Oct 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub