Search/CVE-2018-16881
● CVE — High

CVE-2018-16881

Vendordebian, redhat, rsyslogProductdebian linux, enterprise linux for ibm z systems, enterprise linux for power little endian, enterprise linux server, enterprise linux desktop, enterprise linux for power big endian, enterprise linux for scientific computing, enterprise linux workstation, virtualization, virtualization host, virtualization manager, rsyslogDiscoveredJan 25, 2019UpdatedNov 21, 2024

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
2.24%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
13 relationships
Timeline
disclosure → media coverage
Jan 25, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024