CVE-2008-5618: imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even...

Security readout for executives and security teams

This is an older rsyslog UDP logging flaw. A system could still write log messages from unauthorized senders, letting a remote attacker flood logs and consume disk space. Business impact is service degradation or outage from full disks, especially on exposed central log collectors. Exposure is most likely where affected rsyslog imudp versions accept UDP syslog traffic from untrusted or broad network segments. Systems not running imudp, not using the listed versions, or tightly limiting syslog senders are less likely exposed. Treat as a targeted hygiene issue for legacy logging infrastructure. It is not supported as actively exploited by the provided sources, but exposed log collectors can become outage points if disks fill. Mitigation focus: Inventory rsyslog systems using the imudp module.; Compare deployed versions against the affected version ranges.; Upgrade beyond the fixed rsyslog versions named in the CVE..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.