Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer …
Info
Summary
Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc(0, len) when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes that pointer to apr_base64_decode. An unauthenticated remote attacker can send an oversized encoded credential to an imhttp endpoint configured for Basic Authentication, causing decoded data to over…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/rsyslog/rsyslog/commit/acde2ba25ea33816694b787859f4a727a247b6d6
- https://github.com/rsyslog/rsyslog/pull/6722
- https://github.com/rsyslog/rsyslog/releases/tag/v8.2604.0
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-947w-69ph-mc2r
- http://www.openwall.com/lists/oss-security/2026/06/23/4
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-947w-69ph-mc2r
Timeline
- nvd_ingest NVD