Back to Database
Status published
Medium
CVE-2008-5618
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta,...
Vulnerability Description
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service (disk consumption) via a large number of spurious messages.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5618
Credits & Attribution
No credits recorded in the NVD database.
References
More from rsyslog
View All →CVE-2022-24903
Buffer overflow in TCP syslog server (receiver) components in rsyslog
High
8.1
CVE-2019-17042
An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a...
Critical
9.8
CVE-2019-17041
An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a...
Critical
9.8
CVE-2019-17040
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level...
Critical
9.8
CVE-2018-1000140
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow...
Critical
9.8
Affected Vendor
rsyslog
View all reports →Affected Software
rsyslog
Vulnerable Versions:
3.12.1, 3.20.0, 4.1.0, 4.1.1
Timeline
Official Publish:
December 17th, 2008
Last Modified:
September 16th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.