High USN-5404-1 1 CVE

rsyslog vulnerability

Published May 5, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Pieter Agten discovered that Rsyslog incorrectly handled certain requests.
An attacker could possibly use this issue to cause a crash.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	rsyslog	8.32.0-1ubuntu4.2
Ubuntu · 20.04 LTS 20.04:LTS	rsyslog	8.2001.0-1ubuntu1.3
Ubuntu · 22.04 LTS 22.04:LTS	rsyslog	8.2112.0-2ubuntu2.2

Vulnerabilities 1

High 8.1

CVE-2022-24903 Public exploit

Buffer overflow in TCP syslog server (receiver) components in rsyslog

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…

rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine

May 5, 2022

References

report
https://ubuntu.com/security/CVE-2022-24903