rsyslog rsyslog

Name: rsyslog rsyslog
Brand: rsyslog

productUS

cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical4high8medium1low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2011-3200US	medium5.0	20.8% (98th)	Exploit	no fix	2011-09-06	51 versions
CVE-2019-17041US	critical9.8	4.45% (91st)	Exploit	no fix	2019-10-07	= 8.1908.0
CVE-2022-24903US	high8.1	3.95% (90th)	Exploit	8.2204.1	2022-05-06	< 8.2204.1
CVE-2014-3634US	high7.5	7.55% (94th)	—	no fix	2014-11-02	19 versions
CVE-2014-3683US	medium5.0	4.58% (92nd)	—	no fix	2014-11-02	20 versions
CVE-2019-17042US	critical9.8	2.98% (87th)	—	no fix	2019-10-07	= 8.1908.0
CVE-2017-12588US	critical9.8	2.83% (87th)	—	no fix	2017-08-06	≤ 8.27.0
CVE-2019-17040US	critical9.8	2.42% (84th)	—	no fix	2019-09-30	= 8.1908.0
CVE-2013-4758US	medium6.8	2.33% (83rd)	—	no fix	2013-10-04	42 versions
CVE-2018-16881US	high7.5	2.24% (83rd)	—	8.27.0	2019-01-25	< 8.27.0
CVE-2008-5617US	high8.5	2.19% (82nd)	—	no fix	2008-12-17	28 versions
CVE-2008-5618US	medium5.0	1.17% (67th)	—	no fix	2008-12-17	4 versions
CVE-2026-19654US	—	0.56% (47th)	—	8.2608.0	2026-08-12	8.36.0 → 8.2608.0
CVE-2011-1488US	medium5.5	0.48% (41st)	—	5.7.6	2019-11-14	< 5.7.6
CVE-2011-1489US	medium5.5	0.47% (41st)	—	5.7.6	2019-11-14	< 5.7.6
CVE-2015-3243US	medium5.5	0.45% (39th)	—	no fix	2017-07-25	—
CVE-2011-4623US	low2.1	0.42% (36th)	—	no fix	2012-09-25	72 versions
CVE-2011-1490US	medium5.5	0.38% (32nd)	—	5.7.6	2019-11-14	< 5.7.6

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-772Missing Release of Resource after Effective Lifetime3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-189CWE-1892 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-787Out-of-bounds Write2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.