Known vulnerabilities in rsyslog (Alpine package)

Vendor: Alpine Linux Development Team
Software: rsyslog (Alpine package)
Software CPE: cpe:2.3:o:alpine:rsyslog_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rsyslog (Alpine package) rsyslog (Alpine package) is affected by 7 known vulnerabilities: 2 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22772 - Out-of-bounds read
CVE-2019-17040		 CWE-125 Medium
No
No
 8.1910.0-r0 14.11.2019 SB2019100722
SB2019102125
SB2019111535
and 1 more
#VU22771 - Memory corruption
CVE-2019-17042		 CWE-119 High
No
No
 8.31.0-r1 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU22770 - Memory corruption
CVE-2019-17041		 CWE-119 High
No
No
 8.31.0-r1 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU32407 - Information Exposure Through Log Files
CVE-2015-3243		 CWE-532 Low
No
No
 8.4.2-r1, 8.4.2-r2 25.07.2017 SB2017072510
SB2018080131
SB2018072029
and 2 more
#VU32475 - Memory corruption
CVE-2014-3634		 CWE-119 Medium
No
No
 8.4.2-r0 02.11.2014 SB2014110202
SB2014120519
SB2014101517
and 6 more
#VU32476 - Improper input validation
CVE-2014-3683		 CWE-20 Medium
No
No
 8.4.2-r0 02.11.2014 SB2014110203
SB2014120520
SB2014101517
and 1 more
#VU32854 - Stack-based buffer overflow
CVE-2011-3200		 CWE-121 Medium
Available
No
 5.8.5-r0 06.09.2011 SB2011090603
SB2011092105