RHSA-2022:4801: Important: rsyslog security update
Published May 30, 2022
·Updated
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.Security Fix(es): rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
64 affected componentsFixes available
redhat/rsyslog<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-crypto<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-crypto-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-debugsource<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-doc<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-elasticsearch<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-elasticsearch-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gnutls<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gnutls-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gssapi<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gssapi-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-kafka<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-kafka-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmaudit<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmaudit-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmjsonparse<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmjsonparse-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmkubernetes<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmkubernetes-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmnormalize<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmnormalize-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmsnmptrapd<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mysql<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mysql-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-pgsql<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-pgsql-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-relp<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-relp-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-snmp<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-snmp-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-crypto<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-crypto-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-debugsource<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-elasticsearch<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-elasticsearch-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gnutls<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gnutls-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gssapi<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-gssapi-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-kafka<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-kafka-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmaudit<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmaudit-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmjsonparse<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmjsonparse-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmkubernetes<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmkubernetes-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmnormalize<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmnormalize-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmsnmptrapd<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mysql<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-mysql-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-pgsql<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-pgsql-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-relp<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-relp-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-snmp<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
redhat/rsyslog-snmp-debuginfo<8.37.0-13.el8_1.1
8.37.0-13.el8_1.1
Remediation
Event History
Jun 9, 2026
Advisory Published
via Red Hat·09:44 PM
Data Sourced
via Red Hat·09:44 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2022:4801?
The vulnerability RHSA-2022:4801 is classified as important.
2
How do I fix RHSA-2022:4801?
To resolve RHSA-2022:4801, update to the fixed rsyslog package version 8.37.0-13.el8_1.1.
3
What is the nature of the vulnerability in RHSA-2022:4801?
RHSA-2022:4801 addresses a heap-based overflow in the TCP syslog handling of rsyslog.
4
Which rsyslog versions are affected by RHSA-2022:4801?
Versions of rsyslog prior to 8.37.0-13.el8_1.1 are affected by RHSA-2022:4801.
5
Is RHSA-2022:4801 relevant to my system?
RHSA-2022:4801 is relevant if you are using vulnerable versions of rsyslog on Red Hat Enterprise Linux.