rsyslog vulnerabilities (Debian)
24 vulnerabilities.
-
rsyslogDebian Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE 8.1 High -
rsyslogDebian [Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin] No score -
rsyslogDebian [mdtls discards the peer-identity verification result] No score -
rsyslogDebian Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 7.5 High -
rsyslogDebian Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd 7.5 High -
rsyslogDebian Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data 8.1 High -
rsyslogDebian Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling 8.2 High -
rsyslogDebian Buffer overflow in TCP syslog server (receiver) components in rsyslog 8.1 High -
rsyslogDebian A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are... 5.5 Medium -
rsyslogDebian A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were... 5.5 Medium -
rsyslogDebian A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are... 5.5 Medium -
rsyslogDebian An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap... 9.8 Critical -
rsyslogDebian An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has... 9.8 Critical -
rsyslogDebian contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level... 9.8 Critical -
rsyslogDebian A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could... 5.3 Medium -
rsyslogDebian The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as... 9.8 Critical -
rsyslogDebian rsyslog uses weak permissions for generating log files, which allows local users to obtain... 5.5 Medium -
rsyslogDebian rsyslog - regression update No score -
rsyslogDebian Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows... 5.0 Medium -
rsyslogDebian rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to... 7.5 High -
rsyslogDebian Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in... 2.1 Low -
rsyslogDebian Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd... 5.0 Medium -
rsyslogDebian imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a... 5.0 Medium -
rsyslogDebian The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender... 8.5 High