Summary
[8.2102.0-101.1]
- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
resolves: rhbz#2081402
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | rsyslog | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-crypto | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-doc | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-elasticsearch | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-gnutls | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-gssapi | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-kafka | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-logrotate | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmaudit | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmfields | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmjsonparse | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmkubernetes | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmnormalize | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mmsnmptrapd | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-mysql | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-omamqp1 | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-openssl | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-pgsql | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-relp | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-snmp | 0:8.2102.0-101.el9_0.1 |
| Oracle Linux · 9 | rsyslog-udpspoof | 0:8.2102.0-101.el9_0.1 |
Vulnerabilities 1
-
High 8.1CVE-2022-24903 Public exploit
Buffer overflow in TCP syslog server (receiver) components in rsyslog
Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…