CVE:CVE-2022-24903
CNNVD:CNNVD-202205-2528
Adiscon Rsyslog是德国Adiscon公司的一个用于收集系统日志的库。
Adiscon Rsyslog 8.2204.0版本及之前版本存在安全漏洞，该漏洞源于使用八位字节计数的帧时，用于接收 TCP 系统日志的模块会出现堆缓冲区溢出，攻击者利用该漏洞可以破坏堆值，导致数据完整性和可用性。
solution:Upgrade rsyslog rsyslog to a higher version than 8.2204.1,and avoid the version (,8.2204.1); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -