Skip to content
OpenAdvisories
High RHSA-2022:4801 1 CVE

Red Hat Security Advisory: rsyslog security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-crypto 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-crypto-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-debugsource 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-doc 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-elasticsearch 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-elasticsearch-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-gnutls 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-gnutls-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-gssapi 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-gssapi-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-kafka 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-kafka-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmaudit 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmaudit-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmjsonparse 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmjsonparse-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmkubernetes 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmkubernetes-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmnormalize 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmnormalize-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmsnmptrapd 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mmsnmptrapd-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mysql 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-mysql-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-pgsql 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-pgsql-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-relp 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-relp-debuginfo 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-snmp 0:8.37.0-13.el8_1.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream rsyslog-snmp-debuginfo 0:8.37.0-13.el8_1.1

Vulnerabilities 1

  • High 8.1
    CVE-2022-24903 Public exploit

    Buffer overflow in TCP syslog server (receiver) components in rsyslog

    Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…

    rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081353
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4801.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24903
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24903
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24903
  • article
    https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8