RHSA-2022:4795: Important: rsyslog security update
Published May 30, 2022
·Updated
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.Security Fix(es): rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
161 affected componentsFixes available
redhat/rsyslog<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debugsource<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-doc<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-logrotate<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debugsource<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-logrotate<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-debugsource<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-logrotate<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-relp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-101.el9_0.1
8.2102.0-101.el9_0.1
redhat/rsyslog<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-crypto<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-crypto-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-debugsource<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-elasticsearch<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-gnutls<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-gnutls-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-gssapi<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-gssapi-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-kafka<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-kafka-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-logrotate<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmaudit<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmfields<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmfields-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmjsonparse<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmkubernetes<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmnormalize<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmsnmptrapd<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mysql<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-mysql-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-omamqp1<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-openssl<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-openssl-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-pgsql<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-pgsql-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-relp<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-relp-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-snmp<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-snmp-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-udpspoof<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-101.el9_0.1.aa
8.2102.0-101.el9_0.1.aa
Remediation
Event History
Mar 3, 2025
Advisory Published
via Red Hat·04:21 AM
Frequently Asked Questions
1
What is the severity of RHSA-2022:4795?
The severity of RHSA-2022:4795 is classified as important due to a heap-based overflow vulnerability.
2
How do I fix RHSA-2022:4795?
To fix RHSA-2022:4795, upgrade the affected rsyslog packages to version 8.2102.0-101.el9_0.1 or later.
3
What software is affected by RHSA-2022:4795?
RHSA-2022:4795 affects multiple rsyslog packages, including rsyslog, rsyslog-crypto, and rsyslog-elasticsearch, among others.
4
How can I identify if my system is vulnerable to RHSA-2022:4795?
You can identify if your system is vulnerable to RHSA-2022:4795 by checking if any affected rsyslog packages are installed in versions prior to 8.2102.0-101.el9_0.1.
5
What types of attacks can RHSA-2022:4795 enable?
RHSA-2022:4795 can potentially allow remote attackers to execute arbitrary code or crash the rsyslog service.