USN-8786-1: rsyslog vulnerability
Ubuntu warned that an rsyslog buffer flaw could let a remote attacker crash the service.
Ubuntu security notice USN-8786-1 says rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could potentially use the flaw to crash rsyslog and cause a denial of service. The notice does not name a CVE or report observed exploitation.
- rsyslog miscalculated buffer sizes while replacing strings.
- A remote attacker could crash rsyslog and cause a denial of service.
- Ubuntu issued the fix as USN-8786-1; no exploitation is reported.
From the original article
It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.