CVE-2026-78002

EUVD-2026-67085
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 52.14%
Debian logo
Debian Releases
Debian Product
Codename
rsyslog
bookworm
postponed
forky
8.2608.0-4
fixed
sid
8.2608.0-4
fixed
trixie
8.2504.0-1+deb13u2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rsyslog
bionic
Fixed 8.32.0-1ubuntu4.2+esm1
released
focal
Fixed 8.2001.0-1ubuntu1.3+esm1
released
jammy
Fixed 8.2112.0-2ubuntu2.5
released
noble
Fixed 8.2312.0-3ubuntu9.4
released
resolute
Fixed 8.2512.0-1ubuntu4.2
released
trusty
not-affected
xenial
Fixed 8.16.0-1ubuntu3.1+esm3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
rsyslog
suse enterprise desktop 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-gssapi
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-gtls
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-mmnormalize
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-mysql
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-ossl
suse enterprise desktop 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-pgsql
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-relp
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-snmp
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
rsyslog-module-udpspoof
suse enterprise sap 15 SP7
8.2608.0-150700.3.24.1
fixed
suse enterprise server 15 SP7
8.2608.0-150700.3.24.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
rsyslog
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-crypto
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-doc
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-elasticsearch
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-gnutls
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-gssapi
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-kafka
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-logrotate
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmaudit
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmfields
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmjsonparse
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmkubernetes
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmnormalize
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mmsnmptrapd
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-mysql
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-omamqp1
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-openssl
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-pgsql
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-relp
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-snmp
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
rsyslog-udpspoof
RHEL 9
0:8.2510.0-2.el9_8.2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
rsyslog
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-crypto
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-crypto-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-debuginfo
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-debugsource
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-doc
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-elasticsearch
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-elasticsearch-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-gnutls
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-gssapi
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-kafka
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-libdbi
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-logrotate
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmaudit
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmaudit-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmfields
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmfields-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmjsonparse
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmjsonparse-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmkubernetes
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmkubernetes-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmnormalize
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmnormalize-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmsnmptrapd
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-mmtaghostname
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mmtaghostname-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-mysql
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-openssl
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-openssl-debuginfo
Amazon Linux 2023
0:8.2204.0-3.amzn2023.0.6
fixed
rsyslog-pgsql
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-relp
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-snmp
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
rsyslog-udpspoof
Amazon Linux 2
0:8.24.0-57.amzn2.2.0.3
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
rsyslog
Azure Linux 3.0
0:8.2308.0-7.azl3
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://access.redhat.com/errata/RHSA-2026:69540
https://access.redhat.com/errata/RHSA-2026:69541
https://access.redhat.com/errata/RHSA-2026:71603
https://access.redhat.com/errata/RHSA-2026:80817
https://access.redhat.com/errata/RHSA-2026:81321
https://access.redhat.com/security/cve/CVE-2026-78002
https://bugzilla.redhat.com/show_bug.cgi?id=2521135
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3
http://www.openwall.com/lists/oss-security/2026/08/29/1