PT-2017-4326 · Rsyslog+5 · Rsyslog+5
Joel Miller
+1
·
Publicado
2017-05-16
·
Atualizado
2022-10-06
·
CVE-2018-16881
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
rsyslog versions prior to 8.27.0
Description:
The issue is related to an integer overflow in the imptcp module of the Rsyslog log processing utility. It allows a remote attacker to cause a denial of service. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash.
Recommendations:
For versions prior to 8.27.0, update to version 8.27.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the imptcp socket to minimize the risk of exploitation.
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Rsyslog