PT-2026-82553

CVE-2026-78002

·

Published

2026-08-27

·

Updated

2026-10-21

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions rsyslog (affected versions not specified)
Description An unauthenticated remote attacker can cause a denial of service (DoS) by triggering a heap buffer overflow. This occurs when the RainerScript replace() function incorrectly calculates the buffer size during string replacement while processing specially crafted syslog messages, resulting in memory corruption.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:69540
ALSA-2026:69541
ALSA-2026:80817
AZL-98400
CLSA-2026-1790795134
CLSA-2026-1790809774
CLSA-2026-1791277281
CLSA-2026-1791277470
CLSA-2026-1791371082
CLSA-2026-1791918528
CLSA-2026-1791954698
CLSA-2026-1791960930
OESA-2026-3838
OESA-2026-3839
OESA-2026-3840
OESA-2026-3841
OESA-2026-3934
RHSA-2026:69540
RHSA-2026:69541
RHSA-2026:81321
SUSE-SU-2026:4611-1
USN-8786-1
Found an issue in the description? Have something to add? Feel free to write us 👾