Skip to content
OpenAdvisories
High USN-5404-2 1 CVE

rsyslog vulnerability

Published May 24, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5404-1 addressed a vulnerability in Rsyslog. This update
provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Pieter Agten discovered that Rsyslog incorrectly handled certain requests.
An attacker could possibly use this issue to cause a crash.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS rsyslog 8.16.0-1ubuntu3.1+esm2

Vulnerabilities 1

  • High 8.1
    CVE-2022-24903 Public exploit

    Buffer overflow in TCP syslog server (receiver) components in rsyslog

    Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…

    rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-24903