Detections
Analytics

Alpine: rsyslog: security update to 8.34.0-r1

critical Tenable Cloud Security Plugin ID 406961

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

 - An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap
 overflow in the parser for AIX log messages. The parser tries to locate a log message delimiter (in this
 case, a space or a colon) but fails to account for strings that do not satisfy this constraint. If the
 string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check
 that detects invalid log messages. The message will then be considered valid, and the parser will eat up
 the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was
 zero and now becomes minus one. The following step in the parser is to shift left the contents of the
 message. To do this, it will call memmove with the right pointers to the target and destination strings,
 but the lenMsg will now be interpreted as a huge value, causing a heap overflow. (CVE-2019-17041)

 - An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in
 the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a
 space or a colon), but fails to account for strings that do not satisfy this constraint. If the string
 does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that
 detects invalid log messages. The message will then be considered valid, and the parser will eat up the
 nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero
 and now becomes minus one. The following step in the parser is to shift left the contents of the message.
 To do this, it will call memmove with the right pointers to the target and destination strings, but the
 lenMsg will now be interpreted as a huge value, causing a heap overflow. (CVE-2019-17042)

See Also

https://security.alpinelinux.org/vuln/CVE-2019-17041

https://security.alpinelinux.org/vuln/CVE-2019-17042

Plugin Details

Severity: Critical

ID: 406961

Version: Revision 1.35

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2019-17042

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Critical

Base Score: 9.3

Threat Score: 8.1

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/7/2019

Reference Information

CVE: CVE-2019-17041, CVE-2019-17042