CVE:CVE-2019-17041
CNNVD:CNNVD-201910-249
Adiscon Rsyslog是德国Adiscon公司的一个用于收集系统日志的库。
Adiscon Rsyslog v8.1908.0版本中的contrib / pmaixforwardedfrom / pmaixforwardedfrom.c文件存在缓冲区错误漏洞。远程攻击者可利用该漏洞在系统上执行任意代码或造成应用程序崩溃。
solution:Upgrade rsyslog rsyslog to a higher version than 8.1908.0,and avoid the version 8.1908.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1