Catalogo CVE

CVE-2019-17042

rsyslog: CVE-2019-17042

[Catalogo CVE]

Gravità
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.98% · Oct 22, 2026

An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrsyslogsid8.2608.0-4fixed
Debianrsyslogforky8.2608.0-4fixed
Debianrsyslogtrixie8.2504.0-1+deb13u2fixed
Debianrsyslogbookworm8.2302.0-1+deb12u1fixed
Ubuntursyslog14.045.8.11-2ubuntu4vulnerable
Ubuntursyslog14.047.4.4-1ubuntu1vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2.1vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2.3vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2.5vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2.6vulnerable
Ubuntursyslog14.047.4.4-1ubuntu2.7vulnerable
Ubuntursyslogpro8.16.0-1ubuntu9vulnerable
Ubuntursyslogpro8.16.0-1ubuntu10vulnerable
Ubuntursyslogpro8.32.0-1ubuntu3vulnerable
Ubuntursyslogpro8.32.0-1ubuntu4vulnerable
Ubuntursyslogpro8.32.0-1ubuntu4.2vulnerable
Ubuntursyslogpro8.32.0-1ubuntu4.2+esm1vulnerable
Alpinersyslog3.108.1904.0-r1fixed
Alpinersyslog3.118.1908.0-r1fixed
Alpinersyslog3.128.1908.0-r1fixed
Alpinersyslog3.138.1908.0-r1fixed
Alpinersyslog3.148.1908.0-r1fixed
Alpinersyslog3.158.1908.0-r1fixed
Alpinersyslog3.168.1908.0-r1fixed
Alpinersyslog3.178.1908.0-r1fixed
Alpinersyslog3.188.1908.0-r1fixed
Alpinersyslog3.198.1908.0-r1fixed
Alpinersyslog3.208.1908.0-r1fixed
Alpinersyslog3.218.1908.0-r1fixed
Alpinersyslog3.228.1908.0-r1fixed
Alpinersyslog3.238.1908.0-r1fixed
Alpinersyslog3.248.1908.0-r1fixed
Alpinersyslog3.78.31.0-r1fixed
Alpinersyslog3.88.34.0-r1fixed
Alpinersyslog3.98.40.0-r4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrsyslogsourcesid8.1910.0-1not yet assignedNot reported[942065]
Debianrsyslogsourceforky8.1910.0-1not yet assignedNot reported[942065]
Debianrsyslogsourcetrixie8.1910.0-1not yet assignedNot reported[942065]
Debianrsyslogsourcebookworm8.1910.0-1not yet assignedNot reported[942065]
Alpinersyslogapk3.108.1904.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.118.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.128.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.138.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.148.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.158.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.168.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.178.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.188.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.198.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.208.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.218.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.228.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.238.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.248.1908.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.78.31.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.88.34.0-r1Not reportedALPINE-CVE-2019-17042Not reported
Alpinersyslogapk3.98.40.0-r4Not reportedALPINE-CVE-2019-17042Not reported

[Debian bug #942065]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [rsyslog]Corretta
    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-czmq]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-elasticsearch]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-gnutls]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-gssapi]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-hiredis]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-kafka]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-kubernetes]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-mongodb]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-mysql]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-openssl]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-pgsql]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-relp]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

  • [rsyslog-snmp]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2302.0-1+deb12u1 · amd64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

    • 8.2302.0-1+deb12u1 · arm64 · bookworm

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · bookworm; dsa · rsyslog · debian · 12

[Debian 13 (Trixie)]

  • [rsyslog]Corretta
    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

  • [rsyslog-clickhouse]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

  • [rsyslog-czmq]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

  • [rsyslog-docker]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

  • [rsyslog-elasticsearch]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

  • [rsyslog-gnutls]Corretta

    Pacchetto sorgente: [rsyslog]

    Dettagli (2)

    • 8.2504.0-1 · amd64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

    • 8.2504.0-1 · arm64 · trixie

      Corretta · Corretta: 8.1910.0-1

      dsa · rsyslog · debian · 13

Altri risultati

Osservato:

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]