2017-06-17
ALT-BU-2017-3180-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2019-01-25
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-16881
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- RHBA-2019:2501
- RHBA-2019:2501
- RHSA-2019:2110
- RHSA-2019:2110
- RHSA-2019:2437
- RHSA-2019:2437
- RHSA-2019:2439
- RHSA-2019:2439
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16881
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16881
- [debian-lts-announce] 20220520 [SECURITY] [DLA 3016-1] rsyslog security update
- [debian-lts-announce] 20220520 [SECURITY] [DLA 3016-1] rsyslog security update
Closed bugs
Init script starts searchd under root user