CVE-2026-19654

Name of the Vulnerable Software and Affected Versions rsyslogd (affected versions not specified)

Description An unauthenticated remote peer can cause rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can result in an invalid internal message length, leading to the termination of the service. This issue does not impact confidentiality or integrity, and does not allow for privilege escalation or code execution. The imtcp module and default imptcp framing modes are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the imptcp module to minimize the risk of exploitation.