{"id":"CVE-2018-16881","aliases":["CLSA-2022-1652706309","DEBIAN-CVE-2018-16881","DLA-3016-1","EUVD-2018-8671","GHSA-hg54-w573-5vvv","MGASA-2019-0110","RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2437","RHSA-2019:2439","SUSE-SU-2019:0209-1","UBUNTU-CVE-2018-16881","USN-5419-1"],"status":"published","title":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.02238,"percentile":0.83046,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2019-01-25T18:00:00Z","modified":"2026-10-24T10:30:35Z","fixes":[{"ecosystem":"Debian:12","package":"rsyslog","fixed_in":["8.27.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rsyslog","fixed_in":["8.27.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rsyslog","fixed_in":["8.27.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"rsyslog","fixed_in":["8.16.0-1.2.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-mmjsonparse","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-41.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gnutls","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gssapi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-kafka","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmjsonparse","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-relp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-crypto","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-doc","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-libdbi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmaudit","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmkubernetes","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmsnmptrapd","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mysql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-pgsql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-snmp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-udpspoof","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gnutls","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gssapi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-kafka","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmjsonparse","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-relp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-crypto","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-doc","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-libdbi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmaudit","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmkubernetes","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmsnmptrapd","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mysql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-pgsql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-snmp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-udpspoof","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gnutls","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gssapi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-kafka","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmjsonparse","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mysql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-pgsql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-relp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-crypto","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-doc","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-libdbi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmaudit","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmkubernetes","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmsnmptrapd","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-snmp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-udpspoof","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-debuginfo","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gnutls","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gssapi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-kafka","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmjsonparse","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mysql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-pgsql","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-relp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-crypto","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-doc","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-elasticsearch","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-libdbi","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmaudit","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmkubernetes","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmnormalize","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmsnmptrapd","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-snmp","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-udpspoof","fixed_in":["0:8.24.0-38.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"rsyslog","fixed_in":["8.24.0-3.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","fixed_in":["8.16.0-1ubuntu3.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.27.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.27.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.27.0-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-1+deb9u2"}]}],"versions":["8.24.0-1","8.24.0-1+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1.2.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-41.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-38.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-20190722.0.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-20190722.0.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-0.1.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng-nodectl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-0.1.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python2-ovirt-node-ng-nodectl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-0.20190717.0.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-2.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.5-2.el7ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rhvm-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3-20190722.0.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.19.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.11-2ubuntu4","7.4.4-1ubuntu1","7.4.4-1ubuntu2","7.4.4-1ubuntu2.1","7.4.4-1ubuntu2.3","7.4.4-1ubuntu2.5","7.4.4-1ubuntu2.6","7.4.4-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+esm1"}]}],"versions":["8.12.0-1ubuntu2","8.12.0-1ubuntu3","8.14.0-2ubuntu1","8.14.0-2ubuntu2","8.16.0-1ubuntu1","8.16.0-1ubuntu2","8.16.0-1ubuntu3","8.16.0-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+esm1"}]}],"versions":["8.12.0-1ubuntu2","8.12.0-1ubuntu3","8.14.0-2ubuntu1","8.14.0-2ubuntu2","8.16.0-1ubuntu1","8.16.0-1ubuntu2","8.16.0-1ubuntu3","8.16.0-1ubuntu3.1"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_scientific_computing"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"},{"vendor":"redhat","product":"virtualization_manager"},{"vendor":"rsyslog","product":"rsyslog"},{"vendor":"the rsyslog project","product":"rsyslog:"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2019:2110","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2439","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2437","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2019:2501","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16881","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00028.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16881","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hg54-w573-5vvv"},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1652706309","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16881","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0110.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24342","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-02/msg00043.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737810","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_2501.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16881","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685901","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2110.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729023","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2437.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16838","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16838","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0161","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0161","tags":["advisory"]},{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1559","tags":["advisory"]},{"url":"https://github.com/RUB-NDS/TLS-Padding-Oracles","tags":["article"]},{"url":"https://www.openssl.org/news/secadv/20190226.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10160","tags":["advisory"]},{"url":"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720255","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2439.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3888","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190209-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1123164","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16881","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-16881","tags":["report"]},{"url":"https://github.com/rsyslog/rsyslog/commit/6c52f29d593a27f934a1871d40eed84ebde3f3a6","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5419-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-17041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17042","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-16881","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:00:00Z","modified":"2024-08-05T10:32:54.189Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:11.426178Z"}],"euvd":[{"id":"EUVD-2018-8671","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:00:00Z","modified":"2024-08-05T10:32:54Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T02:39:40.316949Z"}],"ghsa":[{"id":"GHSA-hg54-w573-5vvv","title":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2022-05-13T01:12:24Z","modified":"2023-02-01T05:03:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:50:06.799159Z"}],"nvd":[{"id":"CVE-2018-16881","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:29:00.257Z","modified":"2026-06-17T01:44:59.05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:53.728218Z"}],"osv":[{"id":"CVE-2018-16881","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:29:00.257Z","modified":"2026-10-24T10:30:35.619612239Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16881","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:29:00.257Z","modified":"2026-10-23T18:03:28.718340673Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHBA-2019:2501","title":"Red Hat Bug Fix Advisory: rsyslog bug fix update","status":"published","published":"2024-09-13T15:07:31Z","modified":"2026-06-29T10:23:20Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2019:2110","title":"Red Hat Security Advisory: rsyslog security and bug fix update","status":"published","published":"2024-09-13T15:11:48Z","modified":"2026-06-29T10:25:49Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2437","title":"Red Hat Security Advisory: Red Hat Virtualization security update","status":"published","published":"2024-09-13T19:53:41Z","modified":"2026-10-08T10:01:37Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2439","title":"Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update","status":"published","published":"2024-09-22T16:36:05Z","modified":"2026-08-09T10:01:50Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-16881","description":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","status":"published","published":"2019-01-25T18:29:00Z","modified":"2026-02-04T04:21:46.186188Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"CLSA-2022-1652706309","title":"Fix CVE(s): CVE-2019-17041, CVE-2019-17042, CVE-2018-16881","description":"\n   * SECURITY UPDATE: denial of dervice\n     - debian/patches/CVE-2018-16881.patch: introduces a frame size check in\n       the processDataRcvd function of plugins/imptcp/imptcp.c.\n     - CVE-2018-16881\n   * SECURITY UPDATE: heap-based overflow\n     - debian/patches/CVE-2019-17041.patch: adds length checks for invalid\n       AIX log message in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c.\n     - CVE-2019-17041\n   * SECURITY UPDATE: heap-based overflow\n     - debian/patches/CVE-2019-17042.patch: adds length checks for invalid\n       Cisco log messages in contrib/pmcisconames/pmcisconames.c.\n     - CVE-2019-17042","status":"published","published":"2022-05-16T13:05:09Z","modified":"2026-06-04T10:03:54.260663043Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-3016-1","title":"rsyslog - security update","status":"published","published":"2022-05-20T00:00:00Z","modified":"2026-03-09T01:18:20.513685Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2019-0110","title":"Updated rsyslog packages fix security vulnerability","description":"A denial of service vulnerability was found in rsyslog in the imptcp\nmodule. An attacker could send a specially crafted message to the imptcp\nsocket, which would cause rsyslog to crash (CVE-2018-16881).\n","status":"published","published":"2019-03-14T21:39:55Z","modified":"2026-04-16T04:42:48.579734722Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2019:0209-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16881: Fixed a denial of service when both the imtcp module and Octet-Counted TCP Framing is enabled (bsc#1123164).\n","status":"published","published":"2019-01-31T08:41:30Z","modified":"2025-05-02T04:07:58.148471Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-5419-1","title":"rsyslog vulnerabilities","description":"It was discovered that Rsyslog improperly handled certain invalid input. An\nattacker could use this issue to cause Rsyslog to crash.\n","status":"published","published":"2022-05-12T08:43:35Z","modified":"2026-06-25T13:31:10.49863815Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}