A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsyslog-logrotateUpgrade rsyslog-kafkaUpgrade rsyslog-elasticsearchUpgrade rsyslogUpgrade rsyslog-gssapiUpgrade rsyslog-cryptoUpgrade rsyslog-opensslUpgrade rsyslog-pgsqlUpgrade rsyslog-mysqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-snmpUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmjsonparseUpgrade rsyslog-omamqp1Upgrade rsyslog-gnutlsUpgrade rsyslog-relpUpgrade rsyslog-docUpgrade rsyslog-mmauditUpgrade rsyslog-udpspoofUpgrade rsyslog-mmfields | Oct 11, 2026 | Sep 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade rsyslog-mmauditUpgrade rsyslog-gssapiUpgrade rsyslog-cryptoUpgrade rsyslog-pgsqlUpgrade rsyslog-snmpUpgrade rsyslog-kafkaUpgrade rsyslogUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-gnutlsUpgrade rsyslog-docUpgrade rsyslog-mmnormalizeUpgrade rsyslog-libdbiUpgrade rsyslog-mysqlUpgrade rsyslog-udpspoofUpgrade rsyslog-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmkubernetesUpgrade rsyslog-relp | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-mmfieldsUpgrade rsyslog-docUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmauditUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmtaghostnameUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslogUpgrade rsyslog-opensslUpgrade rsyslog-mmtaghostname-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-crypto-debuginfo | Sep 30, 2026 | Aug 27, 2026 |
| Debian | — | Upgrade rsyslog | Sep 21, 2026 | Aug 27, 2026 |
| Ibm Aix | — | Apply the fix or workaround for rsyslog_advisory2 | Oct 15, 2026 | Oct 8, 2026 |
| Oracle_linux | — | Upgrade rsyslog-pgsqlUpgrade rsyslogUpgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetesUpgrade rsyslog-omamqp1Upgrade rsyslog-opensslUpgrade rsyslog-cryptoUpgrade rsyslog-snmpUpgrade rsyslog-elasticsearchUpgrade rsyslog-mysqlUpgrade rsyslog-mmauditUpgrade rsyslog-gssapiUpgrade rsyslog-kafkaUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmfieldsUpgrade rsyslog-relpUpgrade rsyslog-udpspoofUpgrade rsyslog-logrotateUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-doc | Oct 22, 2026 | Aug 27, 2026 |
| Redhat_linux | — | Upgrade rsyslog-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-omamqp1Upgrade rsyslog-docUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-snmpNo solution existsUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-udpspoofUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-pgsqlUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-mmkubernetesUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-elasticsearchUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-kafkaUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-mmfieldsUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-opensslUpgrade rsyslogUpgrade rsyslog-debugsourceUpgrade rsyslog-gssapi | Aug 31, 2026 | Aug 26, 2026 |
| Rocky_linux | — | Upgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-gssapiUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-logrotateUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-pgsqlUpgrade rsyslog-udpspoofUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-kafkaUpgrade rsyslog-mmkubernetesUpgrade rsyslog-gnutlsUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-omamqp1Upgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-relpUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-opensslUpgrade rsyslog-mmfieldsUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslogUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-cryptoUpgrade rsyslog-snmpUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-mmjsonparse | Sep 28, 2026 | Sep 23, 2026 |
| Ubuntu | — | Upgrade rsyslog (Ubuntu Pro)Upgrade rsyslog | Sep 21, 2026 | Aug 27, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub