Skip to content
OpenAdvisories
High RLSA-2022:4795 1 CVE

Important: rsyslog security update

Published May 30, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

Security Fix(es):

* rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 rsyslog 0:8.2102.0-101.el9_0.1

Vulnerabilities 1

  • High 8.1
    CVE-2022-24903 Public exploit

    Buffer overflow in TCP syslog server (receiver) components in rsyslog

    Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…

    rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081353