rsyslog: mmpstrucdata denial of service fixed in 8.2606.0
rsyslog 8.2606.0 fixes a denial-of-service flaw in the mmpstrucdata module parsing RFC 5424 structured data with oversized parameter values.
Rainer Gerhards announced rsyslog 8.2606.0, fixing a denial-of-service issue tracked as GHSA-2whq-6rcm-64m8. Only configurations with the mmpstrucdata module enabled, which parses RFC 5424 structured data and accepts sufficiently large messages, are affected; the module is not enabled by default. In affected versions, a crafted message carrying an oversized parameter value could terminate the rsyslog daemon.
32