Записи rsyslog
20 опубликованных записей вендора rsyslog.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 5 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 95 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-772 Missing Release of Resource after Effective Lifetime3
- CWE-125 Out-of-bounds Read2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-189 Numeric Errors2
- CWE-787 Out-of-bounds Write2
- CWE-190 Integer Overflow or Wraparound1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
20 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
42В плане | CVE-2018-1000140Proof of concept | rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that carsyslog · librelp · CWE-787 | Критическая9,8 | — | 9,3 % | 23 мар. 2018 г. |
40В плане | CVE-2019-17041Proof of concept | An issue was discovered in Rsyslog v8.1908.0.rsyslog · rsyslog · CWE-787 | Критическая9,8 | — | 4,4 % | 7 окт. 2019 г. |
40В плане | CVE-2019-17042Эксплойта нет | An issue was discovered in Rsyslog v8.1908.0.rsyslog · rsyslog · CWE-20 | Критическая9,8 | — | 3,0 % | 7 окт. 2019 г. |
40В плане | CVE-2017-12588Эксплойта нет | The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format strirsyslog · rsyslog · CWE-134 | Критическая9,8 | — | 2,8 % | 6 авг. 2017 г. |
40В плане | CVE-2019-17040Эксплойта нет | contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.rsyslog · rsyslog · CWE-125 | Критическая9,8 | — | 2,4 % | 30 сент. 2019 г. |
35Наблюдать | CVE-2008-5617Эксплойта нет | The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to byrsyslog · rsyslog · CWE-264 | Высокая8,5 | — | 2,2 % | 16 дек. 2008 г. |
33Наблюдать | CVE-2022-24903Proof of concept | Buffer overflow in TCP syslog server (receiver) components in rsyslogrsyslog · rsyslog · CWE-120 | Высокая8,1 | — | 3,9 % | 5 мая 2022 г. |
32Наблюдать | CVE-2014-3634Эксплойта нет | rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possiblrsyslog · rsyslog · CWE-119 | Высокая7,5 | — | 7,5 % | 1 нояб. 2014 г. |
31Наблюдать | CVE-2018-16881Эксплойта нет | A denial of service vulnerability was found in rsyslog in the imptcp module.rsyslog · rsyslog · CWE-190 | Высокая7,5 | — | 2,2 % | 25 янв. 2019 г. |
30Наблюдать | CVE-2005-3074Эксплойта нет | SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands rsyslog · rsyslogd | Высокая7,5 | — | 1,1 % | 27 сент. 2005 г. |
30Наблюдать | CVE-2026-19654Эксплойта нет | Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdrsyslog · rsyslog · CWE-125 | Высокая7,5 | — | 0,5 % | 12 авг. 2026 г. |
28Наблюдать | CVE-2013-4758Эксплойта нет | Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.rsyslog · rsyslog · CWE-399 | Средняя6,8 | — | 2,3 % | 4 окт. 2013 г. |
26Наблюдать | CVE-2011-3200Готовый эксплойт | Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 throrsyslog · rsyslog · CWE-119 | Средняя5,0 | — | 20,8 % | 6 сент. 2011 г. |
22Наблюдать | CVE-2011-1488Эксплойта нет | A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled.rsyslog · rsyslog · CWE-772 | Средняя5,5 | — | 0,5 % | 13 нояб. 2019 г. |
22Наблюдать | CVE-2011-1489Эксплойта нет | A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and sorsyslog · rsyslog · CWE-772 | Средняя5,5 | — | 0,5 % | 13 нояб. 2019 г. |
22Наблюдать | CVE-2015-3243Эксплойта нет | rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/lorsyslog · rsyslog · CWE-532 | Средняя5,5 | — | 0,4 % | 25 июл. 2017 г. |
22Наблюдать | CVE-2011-1490Эксплойта нет | A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and somrsyslog · rsyslog · CWE-772 | Средняя5,5 | — | 0,4 % | 13 нояб. 2019 г. |
21Наблюдать | CVE-2014-3683Эксплойта нет | Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of servrsyslog · rsyslog · CWE-189 | Средняя5,0 | — | 4,6 % | 1 нояб. 2014 г. |
20Наблюдать | CVE-2008-5618Эксплойта нет | imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorizrsyslog · rsyslog | Средняя5,0 | — | 1,2 % | 16 дек. 2008 г. |
8Наблюдать | CVE-2011-4623Эксплойта нет | Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, rsyslog · rsyslog · CWE-189 | Низкая2,1 | — | 0,4 % | 25 сент. 2012 г. |
- CVE-2018-100014042В плане
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that ca
КритическаяCVSS 9,8Proof of conceptEPSS 9 %rsyslog · librelp23 мар. 2018 г.
- CVE-2019-1704140В плане
An issue was discovered in Rsyslog v8.1908.0.
КритическаяCVSS 9,8Proof of conceptEPSS 4 %rsyslog · rsyslog7 окт. 2019 г.
- CVE-2019-1704240В плане
An issue was discovered in Rsyslog v8.1908.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %rsyslog · rsyslog7 окт. 2019 г.
- CVE-2017-1258840В плане
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format stri
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %rsyslog · rsyslog6 авг. 2017 г.
- CVE-2019-1704040В плане
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %rsyslog · rsyslog30 сент. 2019 г.
- CVE-2008-561735Наблюдать
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to by
ВысокаяCVSS 8,5Эксплойта нетEPSS 2 %rsyslog · rsyslog16 дек. 2008 г.
- CVE-2022-2490333Наблюдать
Buffer overflow in TCP syslog server (receiver) components in rsyslog
ВысокаяCVSS 8,1Proof of conceptEPSS 4 %rsyslog · rsyslog5 мая 2022 г.
- CVE-2014-363432Наблюдать
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibl
ВысокаяCVSS 7,5Эксплойта нетEPSS 8 %rsyslog · rsyslog1 нояб. 2014 г.
- CVE-2018-1688131Наблюдать
A denial of service vulnerability was found in rsyslog in the imptcp module.
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %rsyslog · rsyslog25 янв. 2019 г.
- CVE-2005-307430Наблюдать
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %rsyslog · rsyslogd27 сент. 2005 г.
- CVE-2026-1965430Наблюдать
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %rsyslog · rsyslog12 авг. 2026 г.
- CVE-2013-475828Наблюдать
Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.
СредняяCVSS 6,8Эксплойта нетEPSS 2 %rsyslog · rsyslog4 окт. 2013 г.
- CVE-2011-320026Наблюдать
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 thro
СредняяCVSS 5,0Готовый эксплойтEPSS 21 %rsyslog · rsyslog6 сент. 2011 г.
- CVE-2011-148822Наблюдать
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled.
СредняяCVSS 5,5Эксплойта нетEPSS 0 %rsyslog · rsyslog13 нояб. 2019 г.
- CVE-2011-148922Наблюдать
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and so
СредняяCVSS 5,5Эксплойта нетEPSS 0 %rsyslog · rsyslog13 нояб. 2019 г.
- CVE-2015-324322Наблюдать
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/lo
СредняяCVSS 5,5Эксплойта нетEPSS 0 %rsyslog · rsyslog25 июл. 2017 г.
- CVE-2011-149022Наблюдать
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and som
СредняяCVSS 5,5Эксплойта нетEPSS 0 %rsyslog · rsyslog13 нояб. 2019 г.
- CVE-2014-368321Наблюдать
Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of serv
СредняяCVSS 5,0Эксплойта нетEPSS 5 %rsyslog · rsyslog1 нояб. 2014 г.
- CVE-2008-561820Наблюдать
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthoriz
СредняяCVSS 5,0Эксплойта нетEPSS 1 %rsyslog · rsyslog16 дек. 2008 г.
- CVE-2011-46238Наблюдать
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4,
НизкаяCVSS 2,1Эксплойта нетEPSS 0 %rsyslog · rsyslog25 сент. 2012 г.