rsyslog is vulnerable to buffer overflow. The vulnerability exists because when there is a check for the maximum number of octets, digits are written to a heap buffer even when the octet count is over the maximum which leads to a memory corruption.
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-24903
github.com/rsyslog/rsyslog/commit/f211042ecbb472f9d8beb4678a65d272b6f07705
github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
lists.debian.org/debian-lts-announce/2022/05/msg00028.html
lists.fedoraproject.org/archives/list/[email protected]/message/GMNNXLCU2UORRVSZO24HL4KMVPK5PHVW/
security.netapp.com/advisory/ntap-20221111-0002/
www.debian.org/security/2022/dsa-5150