CVE-2019-17041
rsyslog - security update
描述
An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon) but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
如何修補 CVE-2019-17041
要修補 CVE-2019-17041,請將受影響套件升級到下列已修補版本。
- —升級至 8.1904.0-r1 或更新版本
- —升級至 8.1910.0-1 或更新版本
- —升級至 8.4.2-1+deb8u3 或更新版本
- —升級至 8.24.0-1+deb9u1 或更新版本
CVE-2019-17041 正在被利用嗎?
低 — EPSS 為 4.6%,目前沒有觀察到大規模利用活動。
受影響套件(4)
- from 0, < 8.1904.0-r1
- from 0, < 8.1910.0-1
- from 0, < 8.4.2-1+deb8u3
- from 0, < 8.24.0-1+deb9u1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |