{"id":"CVE-2018-16881","details":"A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.","modified":"2026-07-07T08:49:53.509881432Z","published":"2019-01-25T18:29:00.257Z","related":["SUSE-SU-2019:0209-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop","cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_for_ibm_z_systems"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_for_power_big_endian"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_for_power_little_endian"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_for_scientific_computing"},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation","cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]},{"source":"CPE_STRING","vendor_product":"redhat:virtualization","cpes":["cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}]},{"source":"CPE_STRING","vendor_product":"redhat:virtualization_host","cpes":["cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}]},{"source":"CPE_STRING","vendor_product":"redhat:virtualization_manager","cpes":["cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.3"},{"last_affected":"4.3"}]}]},"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHBA-2019:2501"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2110"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2437"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2439"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00028.html"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16881"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rsyslog/rsyslog","events":[{"introduced":"0"},{"fixed":"063f4701e36dbc2ae5ee2dfe980319f28a00c464"}],"database_specific":{"cpe":"cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"8.27.0"}],"source":"CPE_RANGE"}}],"versions":["v8.25.0","v8.26.0","v8.24.0","v8.23.0","v8.22.0","v8.21.0","v8.20.0","v8.19.0","v8.18.0","v8.13.0","v8.12.0","v8.10.0","v8.9.0","v8.4.2","v8.4.1","v8.4.0","v8.3.5","v8.3.4","v8.3.3","v8.3.2","v8.3.1","v8.3.0","v8.1.6","v7.5.3","v7.5.2","v7.5.1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-16881.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}