- Vulnerability/
- RHSA-2022:4795
30/5/2022
3/3/2025
RHSA-2022:4795: Important: rsyslog security update
First published: Mon May 30 2022(Updated: )
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.<br>Security Fix(es):<br><li> rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/rsyslog | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debugsource | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-doc | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-logrotate | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1 | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debugsource | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-logrotate | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1 | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-crypto-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-debugsource | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-elasticsearch-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gnutls-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-gssapi-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-kafka-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-logrotate | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmaudit-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmfields-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmjsonparse-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmkubernetes-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmnormalize-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mmsnmptrapd-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-mysql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1 | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-omamqp1-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-openssl-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-pgsql-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-relp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-snmp-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog-udpspoof-debuginfo | <8.2102.0-101.el9_0.1 | 8.2102.0-101.el9_0.1 |
| redhat/rsyslog | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-crypto | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-crypto-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-debugsource | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-elasticsearch | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-elasticsearch-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-gnutls | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-gnutls-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-gssapi | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-gssapi-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-kafka | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-kafka-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-logrotate | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmaudit | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmaudit-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmfields | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmfields-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmjsonparse | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmjsonparse-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmkubernetes | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmkubernetes-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmnormalize | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmnormalize-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmsnmptrapd | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mmsnmptrapd-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mysql | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-mysql-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-omamqp1 | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-omamqp1-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-openssl | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-openssl-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-pgsql | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-pgsql-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-relp | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-relp-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-snmp | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-snmp-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-udpspoof | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
| redhat/rsyslog-udpspoof-debuginfo | <8.2102.0-101.el9_0.1.aa | 8.2102.0-101.el9_0.1.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2022:4795?
The severity of RHSA-2022:4795 is classified as important due to a heap-based overflow vulnerability.
How do I fix RHSA-2022:4795?
To fix RHSA-2022:4795, upgrade the affected rsyslog packages to version 8.2102.0-101.el9_0.1 or later.
What software is affected by RHSA-2022:4795?
RHSA-2022:4795 affects multiple rsyslog packages, including rsyslog, rsyslog-crypto, and rsyslog-elasticsearch, among others.
How can I identify if my system is vulnerable to RHSA-2022:4795?
You can identify if your system is vulnerable to RHSA-2022:4795 by checking if any affected rsyslog packages are installed in versions prior to 8.2102.0-101.el9_0.1.
What types of attacks can RHSA-2022:4795 enable?
RHSA-2022:4795 can potentially allow remote attackers to execute arbitrary code or crash the rsyslog service.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:4795
- agent/software-canonical-lookup
- agent/references
- agent/remedy
- agent/tags
- agent/event
- agent/source
- package-manager/redhat