CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthenticated remote peers to crash the rsyslogd service due to a flaw in the optional imptcp module, triggered by a crafted input sequence during oversize-frame recovery. While there is no impact on confidentiality, integrity, or privilege escalation, the service interruption can disrupt logging functionalities. Organizations utilizing rsyslogd with the imptcp module should prioritize addressing this issue to maintain service availability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.