It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-075 advisory.

    A flaw was found in the way rsyslog handled invalid log message priority values. In certain     configurations, a local attacker, or a remote attacker able to connect to the rsyslog port, could use this     flaw to crash the rsyslog daemon or, potentially in rsyslog 7.x, execute arbitrary code as the user     running the rsyslog daemon. (CVE-2014-3634)

    A flaw was found in rsyslog's reception TCP modules. This flaw allows an attacker to craft a malicious     message leading to a heap-based buffer overflow. This issue allows the attacker to corrupt or access data     stored in memory, leading to a denial of service in the rsyslog or possible remote code execution.
    (CVE-2022-24903)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2022 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2022-2022-075)

high Nessus Plugin ID 164767

Version 1.4