Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-16881: A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. 99999: CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | rsyslog | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-crypto | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-debuginfo | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-doc | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-elasticsearch | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-gnutls | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-gssapi | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-kafka | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-libdbi | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mmaudit | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mmjsonparse | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mmkubernetes | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mmnormalize | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mmsnmptrapd | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-mysql | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-pgsql | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-relp | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-snmp | 0:8.24.0-41.amzn2.2.1 |
| Amazon Linux · 2 | rsyslog-udpspoof | 0:8.24.0-41.amzn2.2.1 |
Vulnerabilities 1
-
Medium 5.3
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-16881.html