PT-2018-19284 · Rsyslog · Rsyslog

Published 2018-09-27 · Updated 2018-09-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions rsyslog (affected versions not specified)

Description A buffer overflow issue was discovered in the SanitizeMsg() function of rsyslogd, located in runtime/parser.c. This could potentially lead to a denial of service or other consequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0392

Affected Products

Rsyslog

References · 4

• https://advisories.mageia.org/MGASA-2018-0392.html · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0392 · Vendor Advisory
• https://github.com/rsyslog/rsyslog/commit/20f8237870eb5e971fa068e4dd4d296f1dbef329 · Note
• https://bugs.mageia.org/show_bug.cgi?id=23439 · Note