A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message len…
High CVSS 7.5
Summary
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://access.redhat.com/errata/RHSA-2026:66405
- https://access.redhat.com/errata/RHSA-2026:67583
- https://access.redhat.com/errata/RHSA-2026:67584
- https://access.redhat.com/security/cve/CVE-2026-19654 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502868 Issue Tracking
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29 Vendor Advisory
Timeline
- nvd_ingest NVD