Every CVE Search/ Get API key

CVE-2018-16881

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...

5.3 MediumFix available

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

2.24%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.3

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
CVE-2018-16881
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2018-8671 5.3

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
EUVD-2018-8671
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-hg54-w573-5vvv 7.5

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
GHSA-hg54-w573-5vvv
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 7.5

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
CVE-2018-16881
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-190
Updated
2026-11-02
OSV 7.5

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
CVE-2018-16881
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-16881 7.5

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
DEBIAN-CVE-2018-16881
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVRHBA-2019:2501 5.3

Red Hat Bug Fix Advisory: rsyslog bug fix update

Record
RHBA-2019:2501
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2019:2110 5.3

Red Hat Security Advisory: rsyslog security and bug fix update

Record
RHSA-2019:2110
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2019:2437 9.8

Red Hat Security Advisory: Red Hat Virtualization security update

Record
RHSA-2019:2437
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2439 5.9

Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update

Record
RHSA-2019:2439
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-16881 7.5

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Record
UBUNTU-CVE-2018-16881
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVCLSA-2022-1652706309 No score

Fix CVE(s): CVE-2019-17041, CVE-2019-17042, CVE-2018-16881

  • SECURITY UPDATE: denial of dervice
    • debian/patches/CVE-2018-16881.patch: introduces a frame size check in the processDataRcvd function of plugins/imptcp/imptcp.c.
    • CVE-2018-16881
  • SECURITY UPDATE: heap-based overflow
    • debian/patches/CVE-2019-17041.patch: adds length checks for invalid AIX log message in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c.
    • CVE-2019-17041
  • SECURITY UPDATE: heap-based overflow
    • debian/patches/CVE-2019-17042.patch: adds length checks for invalid Cisco log messages in contrib/pmcisconames/pmcisconames.c.
    • CVE-2019-17042
Record
CLSA-2022-1652706309
Updated
2026-11-02
OSVMGASA-2019-0110 No score

Updated rsyslog packages fix security vulnerability

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash (CVE-2018-16881).

Record
MGASA-2019-0110
Updated
2026-11-02
OSVSUSE-SU-2019:0209-1 No score

Security update for rsyslog

This update for rsyslog fixes the following issues:

Security issue fixed:

  • CVE-2018-16881: Fixed a denial of service when both the imtcp module and Octet-Counted TCP Framing is enabled (bsc#1123164).
Record
SUSE-SU-2019:0209-1
Updated
2026-11-02
OSVUSN-5419-1 No score

rsyslog vulnerabilities

It was discovered that Rsyslog improperly handled certain invalid input. An attacker could use this issue to cause Rsyslog to crash.

Record
USN-5419-1
Updated
2026-11-02

Affected products

Show 1 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
rsyslog
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-elasticsearch
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-gnutls
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-gssapi
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-mysql
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-pgsql
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog-relp
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+tuxcare.els1
8.16.0-1ubuntu3.1+tuxcare.els1
rsyslog
Debian:12
 before 8.27.0-2
8.27.0-2
rsyslog
Debian:13
 before 8.27.0-2
8.27.0-2
rsyslog
Debian:14
 before 8.27.0-2
8.27.0-2
Show 106 moreShow less
Affected packages
PackageAffectedFixed
rsyslog
Debian:9
From an advisory covering 2 CVEs
 before 8.24.0-1+deb9u2, plus listed versions
8.24.0-18.24.0-1+deb9u1
8.24.0-1+deb9u2
rsyslog
Mageia:6
 before 8.16.0-1.2.mga6
8.16.0-1.2.mga6
rsyslog
Red Hat:enterprise_linux:7::hypervisor
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-debuginfo
Red Hat:enterprise_linux:7::hypervisor
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-elasticsearch
Red Hat:enterprise_linux:7::hypervisor
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-mmjsonparse
Red Hat:enterprise_linux:7::hypervisor
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-mmnormalize
Red Hat:enterprise_linux:7::hypervisor
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog
Red Hat:rhev_manager:4.3
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-debuginfo
Red Hat:rhev_manager:4.3
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-elasticsearch
Red Hat:rhev_manager:4.3
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog-mmnormalize
Red Hat:rhev_manager:4.3
 before 0:8.24.0-41.el7_7
0:8.24.0-41.el7_7
rsyslog
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gnutls
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gssapi
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-kafka
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmjsonparse
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-relp
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-crypto
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-doc
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-elasticsearch
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-libdbi
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmaudit
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmkubernetes
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmnormalize
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmsnmptrapd
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mysql
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-pgsql
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-snmp
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-udpspoof
Red Hat:enterprise_linux:7::client
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gnutls
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gssapi
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-kafka
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmjsonparse
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-relp
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-crypto
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-doc
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-elasticsearch
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-libdbi
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmaudit
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmkubernetes
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmnormalize
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmsnmptrapd
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mysql
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-pgsql
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-snmp
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-udpspoof
Red Hat:enterprise_linux:7::computenode
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gnutls
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gssapi
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-kafka
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmjsonparse
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mysql
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-pgsql
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-relp
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-crypto
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-doc
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-elasticsearch
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-libdbi
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmaudit
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmkubernetes
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmnormalize
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmsnmptrapd
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-snmp
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-udpspoof
Red Hat:enterprise_linux:7::server
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gnutls
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-gssapi
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-kafka
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmjsonparse
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mysql
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-pgsql
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-relp
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-crypto
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-doc
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-elasticsearch
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-libdbi
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmaudit
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmkubernetes
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmnormalize
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-mmsnmptrapd
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-snmp
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
rsyslog-udpspoof
Red Hat:enterprise_linux:7::workstation
 before 0:8.24.0-38.el7
0:8.24.0-38.el7
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-20190722.0.el7_7
0:4.3.5-20190722.0.el7_7
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-20190722.0.el7_7
0:4.3.5-20190722.0.el7_7
imgbased
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:1.1.9-0.1.el7ev
0:1.1.9-0.1.el7ev
ovirt-node-ng
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-0.20190717.0.el7ev
0:4.3.5-0.20190717.0.el7ev
ovirt-node-ng-nodectl
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-0.20190717.0.el7ev
0:4.3.5-0.20190717.0.el7ev
python-imgbased
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:1.1.9-0.1.el7ev
0:1.1.9-0.1.el7ev
python2-ovirt-node-ng-nodectl
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-0.20190717.0.el7ev
0:4.3.5-0.20190717.0.el7ev
redhat-release-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-2.el7ev
0:4.3.5-2.el7ev
redhat-virtualization-host-image-update-placeholder
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 6 CVEs
 before 0:4.3.5-2.el7ev
0:4.3.5-2.el7ev
rhvm-appliance
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 2:4.3-20190722.0.el7
2:4.3-20190722.0.el7
rsyslog
SUSE:Linux Enterprise Desktop 12 SP3
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
SUSE:Linux Enterprise Desktop 12 SP4
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
SUSE:Linux Enterprise Server 12 SP3
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
SUSE:Linux Enterprise Server 12 SP4
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 8.24.0-3.19.1
8.24.0-3.19.1
rsyslog
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.8.11-2ubuntu47.4.4-1ubuntu17.4.4-1ubuntu27.4.4-1ubuntu2.17.4.4-1ubuntu2.37.4.4-1ubuntu2.57.4.4-1ubuntu2.67.4.4-1ubuntu2.7
 None known
rsyslog
Ubuntu:Pro:16.04:LTS
 before 8.16.0-1ubuntu3.1+esm1, plus listed versions
8.12.0-1ubuntu28.12.0-1ubuntu38.14.0-2ubuntu18.14.0-2ubuntu28.16.0-1ubuntu18.16.0-1ubuntu28.16.0-1ubuntu38.16.0-1ubuntu3.1
8.16.0-1ubuntu3.1+esm1
rsyslog
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 8.16.0-1ubuntu3.1+esm1, plus listed versions
8.12.0-1ubuntu28.12.0-1ubuntu38.14.0-2ubuntu18.14.0-2ubuntu28.16.0-1ubuntu18.16.0-1ubuntu28.16.0-1ubuntu38.16.0-1ubuntu3.1
8.16.0-1ubuntu3.1+esm1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-16881 is a medium vulnerability (CVSS 5.3) in Rsyslog, published January 25, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 82nd percentile. Fixed in rsyslog 8.27.0-2.

References

Show 73 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open