TI-2019-12711 CVE-2019-17041 · GHSA-wvqp-mg76-5qw7
An issue was discovered in Rsyslog v8.1908.0.
Priority MEDIUM 49
An issue was discovered in Rsyslog v8.1908.0.
rsyslog
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
rsyslog records in CISA KEVNo rsyslog vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records in Rsyslog · all components
TI-2019-12712 CVE-2019-17042 · GHSA-cc7p-3mrm-7xhh
An issue was discovered in Rsyslog v8.1908.0.
Priority MEDIUM 47
An issue was discovered in Rsyslog v8.1908.0.
TI-2019-12710 CVE-2019-17040 · GHSA-8xrx-4ww5-fhx5
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
Priority MEDIUM 47
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
TI-2017-09315 CVE-2017-12588 · GHSA-f39p-m8r2-p6f6
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields…
Priority MEDIUM 47
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.
Priority MEDIUM 44
Rsyslog is a rocket-fast system for log processing.
TI-2014-02955 CVE-2014-3634 · GHSA-h4gg-9gq4-7c4h
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote…
Priority MEDIUM 43
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priorit…
TI-2011-02830 CVE-2011-3200 · GHSA-56wq-xcxw-c4q3
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in…
Priority MEDIUM 42
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application…
TI-2008-05327 CVE-2008-5617 · GHSA-8fh8-56w4-443q
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow…
Priority MEDIUM 41
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large numbe…
Priority MEDIUM 40
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module.
TI-2018-12091 CVE-2018-16881 · GHSA-hg54-w573-5vvv
Integer overflow in rsyslog:
Priority LOW 37
A denial of service vulnerability was found in rsyslog in the imptcp module.
TI-2013-04174 CVE-2013-4758 · GHSA-h9vm-3m8j-cpjv
Double free vulnerability in the writeDataError function in the ElasticSearch plugin…
Priority LOW 35
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to ca…
TI-2014-03000 CVE-2014-3683 · GHSA-cj25-wc2v-fhxm
Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and…
Priority LOW 30
Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value.
TI-2015-02871 CVE-2015-3243 · GHSA-mg7r-rgfr-mmj9
rsyslog uses weak permissions for generating log files, which allows local users to…
Priority LOW 25
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
TI-2011-01310 CVE-2011-1490 · GHSA-ph9m-fj6v-j5p3
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages…
Priority LOW 25
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset.
TI-2011-01309 CVE-2011-1489 · GHSA-3v8w-83qw-5vpf
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages…
Priority LOW 25
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset.
TI-2011-01308 CVE-2011-1488 · GHSA-3php-pxg5-vr69
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages…
Priority LOW 25
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled.
TI-2008-05328 CVE-2008-5618 · GHSA-vp77-fmxj-574r
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2…
Priority LOW 25
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service (disk cons…
TI-2011-03989 CVE-2011-4623 · GHSA-j846-qfh4-5c92
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile…
Priority LOW 12
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon han…