Rsyslog vulnerabilities

Products

• Rsyslog 21

Newest

• rsyslog Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE CVE-2026-92709 Fix available 8.1 HighOctober 22, 2026
• rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 more Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654 Fix available 7.5 HighAugust 12, 2026
• rsyslog Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data CVE-2026-61548 Fix available 8.1 HighJuly 20, 2026
• rsyslog Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling CVE-2026-55556 Fix available 8.2 HighJune 24, 2026
• rsyslog, debian linux, fedoraproject fedora +1 more +3 more Buffer overflow in TCP syslog server (receiver) components in rsyslog CVE-2022-24903 Public exploitFix available 8.1 HighMay 5, 2022
• rsyslog, debian linux, opensuse +2 more A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are... CVE-2011-1490 Fix available 5.5 MediumNovember 14, 2019
• rsyslog, debian linux, opensuse +2 more A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were... CVE-2011-1489 Fix available 5.5 MediumNovember 14, 2019
• rsyslog, debian linux, opensuse +2 more A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are... CVE-2011-1488 Fix available 5.5 MediumNovember 14, 2019
• rsyslog, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap... CVE-2019-17042 Fix available 9.8 CriticalOctober 7, 2019
• rsyslog, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has... CVE-2019-17041 Public exploitFix available 9.8 CriticalOctober 7, 2019
• rsyslog contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level... CVE-2019-17040 Fix available 9.8 CriticalSeptember 30, 2019
• rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 more A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could... CVE-2018-16881 Fix available 5.3 MediumJanuary 25, 2019
• rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 more rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the... CVE-2018-1000140 Public exploitFix available 9.8 CriticalMarch 23, 2018
• rsyslog The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as... CVE-2017-12588 Fix available 9.8 CriticalAugust 6, 2017
• rsyslog rsyslog uses weak permissions for generating log files, which allows local users to obtain... CVE-2015-3243 Fix available 5.5 MediumJuly 25, 2017
• rsyslog, sysklogd project sysklogd +1 more Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows... CVE-2014-3683 Fix available 5.0 MediumOctober 2, 2014
• rsyslog, sysklogd project sysklogd +1 more rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to... CVE-2014-3634 Fix available 7.5 HighSeptember 30, 2014
• rsyslog Double free vulnerability in the writeDataError function in the ElasticSearch plugin ... CVE-2013-4758 6.8 MediumOctober 4, 2013
• rsyslog Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in... CVE-2011-4623 Fix available 2.1 LowSeptember 25, 2012
• rsyslog Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd... CVE-2011-3200 Fix available EPSS 20.8% 5.0 MediumSeptember 6, 2011
• rsyslog imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a... CVE-2008-5618 Fix available 5.0 MediumDecember 17, 2008
• rsyslog The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender... CVE-2008-5617 Fix available 8.5 HighDecember 17, 2008
• rsyslog rsyslogd SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote... CVE-2005-3074 7.5 HighSeptember 27, 2005