SUSE-SU-2019:2937-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2019:2937-1

MEDIUM5.1

Security update for rsyslog

Published Nov 8, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for rsyslog fixes the following issues:

Security issues fixed:

CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).
CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).

Other issue addressed:

Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063).

Affected Packages

rsyslog

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-gssapi

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-gtls

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-mmnormalize

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-mysql

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-pgsql

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-relp

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-snmp

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

rsyslog-module-udpspoof

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

8.33.1-3.22.4

References

https://bugzilla.suse.com/1141063

https://bugzilla.suse.com/1153451

https://bugzilla.suse.com/1153459

https://lists.suse.com/pipermail/sle-security-updates/2019-November/006105.html

https://www.suse.com/security/cve/CVE-2019-17041/

https://www.suse.com/security/cve/CVE-2019-17042/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2019/suse-su-20192937-1/

CVSS Analysis

CVSS v3.0

5.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2019-17041 CVE-2019-17042

Ecosystems

SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1

Timeline

PublishedNov 8, 2019

ModifiedNov 8, 2019