{"id":"CVE-2019-17042","aliases":["ALPINE-CVE-2019-17042","CLSA-2022-1652706309","DEBIAN-CVE-2019-17042","DLA-1952-1","DLA-2835-1","EUVD-2019-7516","GHSA-cc7p-3mrm-7xhh","MGASA-2019-0400","RHSA-2020:1000","RHSA-2020:1702","SUSE-RU-2019:2816-1","SUSE-SU-2019:2937-1","SUSE-SU-2020:0424-1","SUSE-SU-2020:0512-1","UBUNTU-CVE-2019-17042","USN-5419-1","openSUSE-SU-2019:2500-1","openSUSE-SU-2019:2501-1"],"status":"published","title":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap...","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02983,"percentile":0.87392,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-20"],"published":"2019-10-07T15:34:04Z","modified":"2026-10-20T10:52:27Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"rsyslog","fixed_in":["8.1904.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rsyslog","fixed_in":["8.1908.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"rsyslog","fixed_in":["8.31.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"rsyslog","fixed_in":["8.34.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"rsyslog","fixed_in":["8.40.0-r4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rsyslog","fixed_in":["8.1910.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rsyslog","fixed_in":["8.1910.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rsyslog","fixed_in":["8.1910.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","fixed_in":["8.16.0-1ubuntu3.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1904.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1908.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.31.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.34.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.40.0-r4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1910.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1910.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1910.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.2-1+deb8u3"}]}],"versions":["8.4.2-1","8.4.2-1+deb8u1","8.4.2-1+deb8u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-1+deb9u1"}]}],"versions":["8.24.0-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.40.0-4.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-libdbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rsyslog-udpspoof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.24.0-52.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-crypto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-elasticsearch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-gssapi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-kafka-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmjsonparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmjsonparse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmkubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmkubernetes-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmnormalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmnormalize-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmsnmptrapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mmsnmptrapd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-relp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-relp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rsyslog-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1911.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.33.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.33.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.33.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.33.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.24.0-3.33.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-3.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-13.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-13.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-18.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-18.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-18.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-18.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.11-2ubuntu4","7.4.4-1ubuntu1","7.4.4-1ubuntu2","7.4.4-1ubuntu2.1","7.4.4-1ubuntu2.3","7.4.4-1ubuntu2.5","7.4.4-1ubuntu2.6","7.4.4-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+esm1"}]}],"versions":["8.12.0-1ubuntu2","8.12.0-1ubuntu3","8.14.0-2ubuntu1","8.14.0-2ubuntu2","8.16.0-1ubuntu1","8.16.0-1ubuntu2","8.16.0-1ubuntu3","8.16.0-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.16.0-1ubuntu9","8.16.0-1ubuntu10","8.32.0-1ubuntu3","8.32.0-1ubuntu4","8.32.0-1ubuntu4.2","8.32.0-1ubuntu4.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.0-1ubuntu3.1+esm1"}]}],"versions":["8.12.0-1ubuntu2","8.12.0-1ubuntu3","8.14.0-2ubuntu1","8.14.0-2ubuntu2","8.16.0-1ubuntu1","8.16.0-1ubuntu2","8.16.0-1ubuntu3","8.16.0-1ubuntu3.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-lp150.2.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"rsyslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.33.1-lp151.6.10.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"rsyslog","product":"rsyslog"}],"references":[{"url":"https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://github.com/rsyslog/rsyslog/pull/3883","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6SUQE25RD37CD24BHKUWMG27U5RQ2FU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPNCHI7X2IEXRH6RYD6IDPR4PLB5RPC7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17042","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPNCHI7X2IEXRH6RYD6IDPR4PLB5RPC7/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6SUQE25RD37CD24BHKUWMG27U5RQ2FU/"},{"url":"https://github.com/advisories/GHSA-cc7p-3mrm-7xhh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-17042","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1652706309","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17042","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0400.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25811","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-11/msg00080.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1000","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766700","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1000.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17042","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1702","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1738213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782353","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1702.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2019-2816/suse-ru-20192816-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149094","tags":["report"]},{"url":"https://bugzilla.suse.com/1153451","tags":["report"]},{"url":"https://bugzilla.suse.com/1153459","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17042","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192937-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141063","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200424-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015203","tags":["report"]},{"url":"https://bugzilla.suse.com/1022804","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200512-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1084682","tags":["report"]},{"url":"https://bugzilla.suse.com/1087920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17042","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5419-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17041","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K34YO2MFPF7UWWPMFPCBD5XIN5B6YXCD/#K34YO2MFPF7UWWPMFPCBD5XIN5B6YXCD","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HGAAMZFD7LMSZOUVWIBFBE2KYRGA2SN/#5HGAAMZFD7LMSZOUVWIBFBE2KYRGA2SN","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T15:34:04Z","modified":"2024-08-05T01:24:48.684Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-7516","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T15:34:04Z","modified":"2024-08-05T01:24:48Z","updated_at":"2026-11-03T02:40:31.468839Z"}],"ghsa":[{"id":"GHSA-cc7p-3mrm-7xhh","title":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap...","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2022-05-24T22:00:56Z","modified":"2023-01-30T05:04:53Z","cwes":["CWE-20","CWE-120"],"updated_at":"2026-11-02T14:47:09.187677Z"}],"nvd":[{"id":"CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T16:15:11.647Z","modified":"2026-06-17T02:23:11.913Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"ALPINE-CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T16:15:11.647Z","modified":"2026-09-21T06:17:52.497517617Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T16:15:11.647Z","modified":"2026-10-20T10:52:27.704707904Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T16:15:11.647Z","modified":"2026-09-21T07:03:05.674360159Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2020:1000","title":"Red Hat Security Advisory: rsyslog security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:46:27Z","modified":"2026-06-26T12:22:08.512129224Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1702","title":"Red Hat Security Advisory: rsyslog security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:46:52Z","modified":"2025-11-22T12:00:13Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2019-17042","description":"An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.","status":"published","published":"2019-10-07T16:15:00Z","modified":"2026-09-21T15:30:44.603863579Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"CLSA-2022-1652706309","title":"Fix CVE(s): CVE-2019-17041, CVE-2019-17042, CVE-2018-16881","description":"\n   * SECURITY UPDATE: denial of dervice\n     - debian/patches/CVE-2018-16881.patch: introduces a frame size check in\n       the processDataRcvd function of plugins/imptcp/imptcp.c.\n     - CVE-2018-16881\n   * SECURITY UPDATE: heap-based overflow\n     - debian/patches/CVE-2019-17041.patch: adds length checks for invalid\n       AIX log message in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c.\n     - CVE-2019-17041\n   * SECURITY UPDATE: heap-based overflow\n     - debian/patches/CVE-2019-17042.patch: adds length checks for invalid\n       Cisco log messages in contrib/pmcisconames/pmcisconames.c.\n     - CVE-2019-17042","status":"published","published":"2022-05-16T13:05:09Z","modified":"2026-06-04T10:03:54.260663043Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-1952-1","title":"rsyslog - security update","status":"published","published":"2019-10-09T00:00:00Z","modified":"2026-03-09T01:23:01.742818Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2835-1","title":"rsyslog - security update","status":"published","published":"2021-11-30T00:00:00Z","modified":"2026-03-09T01:22:55.969337Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2019-0400","title":"Updated rsyslog packages fix security vulnerabilities","description":"Updated rsyslog packages fix security vulnerabilities:\n\nHeap overflow in the parser for AIX log messages (CVE-2019-17041).\n\nHeap overflow in the parser for Cisco log messages (CVE-2019-17042).\n","status":"published","published":"2019-12-19T13:44:26Z","modified":"2026-04-16T04:42:15.374640942Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2500-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:     \n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nOther issue addressed: \n\n- Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-13T19:20:38Z","modified":"2026-02-04T02:17:48.209094Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2501-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:     \n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nOther issue addressed: \n\n- Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-13T23:20:20Z","modified":"2026-02-04T04:32:33.172001Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-RU-2019:2816-1","title":"Recommended update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nNon-security issue fixed:\n\n- imudp: fix segfault in ratelimit code (bsc#1149094)\n  \n","status":"published","published":"2019-10-29T14:14:43Z","modified":"2025-05-02T04:09:01.631039Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:2937-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:     \n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nOther issue addressed: \n\n- Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). \n","status":"published","published":"2019-11-08T13:08:48Z","modified":"2026-02-04T03:52:29.913952Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0424-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nNon-security issues fixed:\n\n- Handle multiline messages correctly when using the imfile module. (bsc#1015203)\n- Fix a race condition in the shutdown sequence in wtp that was causing rsyslog not to\n  shutdown properly. (bsc#1022804)\n","status":"published","published":"2020-02-19T16:07:46Z","modified":"2026-02-04T02:28:18.190933Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0512-1","title":"Security update for rsyslog","description":"This update for rsyslog fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).\n- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).\n\nNon-security issues fixed:\n\n- Handle multiline messages correctly when using the imfile module. (bsc#1015203)\n- Fix a race condition in the shutdown sequence in wtp that was causing rsyslog not to\n  shutdown properly. (bsc#1022804)\n- Fixed a rsyslogd SIGABORT crash if a path does not exists (bsc#1087920).\n- Fixed an issue where configuration templates where not consistently flushed (bsc#1084682).\n","status":"published","published":"2020-02-27T12:15:00Z","modified":"2026-02-04T04:36:14.315468Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-5419-1","title":"rsyslog vulnerabilities","description":"It was discovered that Rsyslog improperly handled certain invalid input. An\nattacker could use this issue to cause Rsyslog to crash.\n","status":"published","published":"2022-05-12T08:43:35Z","modified":"2026-06-25T13:31:10.49863815Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}