contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17040.json"