Catalogo CVE

CVE-2018-16881

rsyslog: CVE-2018-16881

Gravità: Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Jan 25, 2019, 6:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.24% · Oct 22, 2026

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	rsyslog	sid	`8.2608.0-4`	fixed
Debian	rsyslog	forky	`8.2608.0-4`	fixed
Debian	rsyslog	trixie	`8.2504.0-1+deb13u2`	fixed
Debian	rsyslog	bookworm	`8.2302.0-1+deb12u1`	fixed
Ubuntu	rsyslog	pro	`8.12.0-1ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.12.0-1ubuntu3`	vulnerable
Ubuntu	rsyslog	pro	`8.14.0-2ubuntu1`	vulnerable
Ubuntu	rsyslog	pro	`8.14.0-2ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu1`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3.1`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3.1+esm1`	fixed
Ubuntu	rsyslog	14.04	`5.8.11-2ubuntu4`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu1`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2.1`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2.3`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2.5`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2.6`	vulnerable
Ubuntu	rsyslog	14.04	`7.4.4-1ubuntu2.7`	vulnerable
Ubuntu	rsyslog	pro	`8.12.0-1ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.12.0-1ubuntu3`	vulnerable
Ubuntu	rsyslog	pro	`8.14.0-2ubuntu1`	vulnerable
Ubuntu	rsyslog	pro	`8.14.0-2ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu1`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu2`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3.1`	vulnerable
Ubuntu	rsyslog	pro	`8.16.0-1ubuntu3.1+esm1`	fixed
Suse	rsyslog	linux enterprise desktop 12 sp3	`8.24.0-3.19.1`	fixed
Suse	rsyslog	linux enterprise desktop 12 sp4	`8.24.0-3.19.1`	fixed
Suse	rsyslog	linux enterprise server 12 sp3	`8.24.0-3.19.1`	fixed
Suse	rsyslog	linux enterprise server for sap applications 12 sp3	`8.24.0-3.19.1`	fixed
Suse	rsyslog	linux enterprise server 12 sp4	`8.24.0-3.19.1`	fixed
Suse	rsyslog	linux enterprise server for sap applications 12 sp4	`8.24.0-3.19.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	rsyslog	source	sid	`8.27.0-2`	not yet assigned	Not reported	Not reported
Debian	rsyslog	source	forky	`8.27.0-2`	not yet assigned	Not reported	Not reported
Debian	rsyslog	source	trixie	`8.27.0-2`	not yet assigned	Not reported	Not reported
Debian	rsyslog	source	bookworm	`8.27.0-2`	not yet assigned	Not reported	Not reported
Ubuntu	rsyslog	deb	pro	`8.16.0-1ubuntu3.1+esm1`	Not reported	USN-5419-1	Not reported
Ubuntu	rsyslog	deb	pro	`8.16.0-1ubuntu3.1+esm1`	Not reported	UBUNTU-CVE-2018-16881	Not reported
Suse	rsyslog	rpm	linux enterprise desktop 12 sp3	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported
Suse	rsyslog	rpm	linux enterprise desktop 12 sp4	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported
Suse	rsyslog	rpm	linux enterprise server 12 sp3	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported
Suse	rsyslog	rpm	linux enterprise server for sap applications 12 sp3	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported
Suse	rsyslog	rpm	linux enterprise server 12 sp4	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported
Suse	rsyslog	rpm	linux enterprise server for sap applications 12 sp4	`8.24.0-3.19.1`	Not reported	SUSE-SU-2019:0209-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[rsyslog]Corretta
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-czmq]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-elasticsearch]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-gnutls]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-gssapi]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-hiredis]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-kafka]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-kubernetes]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-mongodb]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-mysql]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-openssl]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-pgsql]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-relp]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
[rsyslog-snmp]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2302.0-1+deb12u1 · amd64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12
- 8.2302.0-1+deb12u1 · arm64 · bookworm
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

[Debian 13 (Trixie)]

[rsyslog]Corretta
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
[rsyslog-clickhouse]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
[rsyslog-czmq]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
[rsyslog-docker]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
[rsyslog-elasticsearch]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
[rsyslog-gnutls]Corretta
Pacchetto sorgente: [rsyslog]
Dettagli (2)
- 8.2504.0-1 · amd64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13
- 8.2504.0-1 · arm64 · trixie
  Corretta · Corretta: 8.27.0-2
  dsa · rsyslog · debian · 13

Altri risultati

Osservato: Oct 23, 2026, 5:35:14 PM UTC

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]