Vulnerabilities in rsyslog
6 resultsVexday analysis
O rsyslog possui 4 vulnerabilidades registradas na base, nenhuma em exploração ativa ou com gravidade crítica, sendo a fraqueza predominante relacionada a buffer overflow (CWE-120). Não há descobertas recentes nos últimos 90 dias, indicando um perfil de risco baixo e estável para este componente.
CVE-2022-24903HIGHBuffer overflow in TCP syslog server (receiver) components in rsyslogEPSS 3.9%CVE-2026-55556HIGHRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingEPSS 0.7%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.6%CVE-2011-1488—A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. EPSS 0.5%CVE-2011-1489—A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and soEPSS 0.5%CVE-2011-1490—A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and somEPSS 0.4%