rpm package
almalinux/rsyslog-logrotate
pkg:rpm/almalinux/rsyslog-logrotate
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-78002 | Hig | 7.5 | < 8.2510.0-2.el9_8.2 | 8.2510.0-2.el9_8.2 | Aug 27, 2026 | A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, | |
| CVE-2026-19654 | Hig | 7.5 | < 8.2510.0-2.el9_8.1 | 8.2510.0-2.el9_8.1 | Aug 12, 2026 | A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege esc |
- affected < 8.2510.0-2.el9_8.2fixed 8.2510.0-2.el9_8.2
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement,
- affected < 8.2510.0-2.el9_8.1fixed 8.2510.0-2.el9_8.1
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege esc