CVE-2026-19654

EUVD-2026-57617
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 55.99%
Affected Products (NVD)
VendorProductVersion
rsyslogrsyslog
8.36.0 ≤
𝑥
< 8.2608.0
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
rsyslog
bookworm
postponed
forky
8.2608.0-4
fixed
sid
8.2610.0-1
fixed
trixie
8.2504.0-1+deb13u2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rsyslog
bionic
needs-triage
focal
needs-triage
jammy
Fixed 8.2112.0-2ubuntu2.4
released
noble
Fixed 8.2312.0-3ubuntu9.3
released
resolute
Fixed 8.2512.0-1ubuntu4.1
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
rsyslog
suse enterprise desktop 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-gssapi
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-gtls
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-mmnormalize
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-mysql
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-ossl
suse enterprise desktop 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-pgsql
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-relp
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-snmp
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-udpspoof
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
rsyslog
RHEL 8
0:8.2102.0-15.el8_10.3
fixed
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-crypto
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-doc
RHEL 8
0:8.2102.0-15.el8_10.3
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-elasticsearch
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-gnutls
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-gssapi
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-kafka
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-logrotate
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmaudit
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmfields
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmjsonparse
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmkubernetes
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmnormalize
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mmsnmptrapd
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-mysql
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-omamqp1
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-openssl
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-pgsql
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-relp
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-snmp
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
rsyslog-udpspoof
RHEL 8.4 AUS
0:8.1911.0-7.el8_4.5
fixed
RHEL 8.6 AUS
0:8.2102.0-7.el8_6.2
fixed
RHEL 8.8 E4S
0:8.2102.0-13.el8_8.1
fixed
RHEL 8.8 TUS
0:8.2102.0-13.el8_8.1
fixed
RHEL 9
0:8.2510.0-2.el9_8.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
rsyslog
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-crypto
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-crypto-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-debugsource
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-doc
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-elasticsearch
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-elasticsearch-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-logrotate
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmaudit
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmaudit-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmfields
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmfields-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmjsonparse
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmjsonparse-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmkubernetes
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmkubernetes-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmnormalize
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmnormalize-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmtaghostname
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-mmtaghostname-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-openssl
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
rsyslog-openssl-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.5
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
rsyslog
Azure Linux 3.0
0:8.2308.0-6.azl3
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:66405
https://access.redhat.com/errata/RHSA-2026:67583
https://access.redhat.com/errata/RHSA-2026:67584
https://access.redhat.com/errata/RHSA-2026:71603
https://access.redhat.com/errata/RHSA-2026:80817
https://access.redhat.com/errata/RHSA-2026:84571
https://access.redhat.com/errata/RHSA-2026:84576
https://access.redhat.com/errata/RHSA-2026:86124
https://access.redhat.com/errata/RHSA-2026:87408
https://access.redhat.com/errata/RHSA-2026:91582
https://access.redhat.com/errata/RHSA-2026:95573
https://access.redhat.com/security/cve/CVE-2026-19654
https://bugzilla.redhat.com/show_bug.cgi?id=2502868
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29