Skip to content
OpenAdvisories
High DSA-5150-1 1 CVE

rsyslog - security update

Published May 28, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 rsyslog 8.1901.0-1+deb10u2
Debian · 11 rsyslog 8.2102.0-2+deb11u1

Vulnerabilities 1

  • High 8.1
    CVE-2022-24903 Public exploit

    Buffer overflow in TCP syslog server (receiver) components in rsyslog

    Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…

    rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine