A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade rsyslog-crypto-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmtaghostname-debuginfoUpgrade rsyslog-mmtaghostnameUpgrade rsyslogUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-mmfieldsUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-docUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-debugsource | Sep 30, 2026 | Aug 27, 2026 |
| Debian | — | Upgrade rsyslog | Sep 21, 2026 | Aug 27, 2026 |
| Redhat_linux | — | Upgrade rsyslog-mysqlNo solution existsUpgrade rsyslog-relpUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-omamqp1Upgrade rsyslog-logrotateUpgrade rsyslog-pgsqlUpgrade rsyslog-docUpgrade rsyslog-snmpUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-mmjsonparseUpgrade rsyslog-cryptoUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmnormalizeUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslogUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-gssapiUpgrade rsyslog-debugsourceUpgrade rsyslog-gnutlsUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmfieldsUpgrade rsyslog-kafkaUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmkubernetes | Aug 31, 2026 | Aug 26, 2026 |
| Rocky_linux | — | Upgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslogUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-mmfieldsUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-logrotateUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-pgsqlUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-gssapiUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-omamqp1Upgrade rsyslog-kafkaUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gnutls | Sep 28, 2026 | Sep 23, 2026 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro)Upgrade rsyslog | Sep 21, 2026 | Aug 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub