CVEvulnerability
CVE-2026-19654
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-08-12
- Last modified
- 2026-10-21
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-125
Description
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
Affected configurations
• rsyslog rsyslog (>= 8.36.0 < 8.2608.0)
• redhat enterprise linux 6.0
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• redhat enterprise linux 10.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://access.redhat.com/errata/RHSA-2026:66405 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:67583 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:67584 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:71603 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:80817 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:84571 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:84576 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:86124 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:87408 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-19654 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502868 Issue Tracking, Third Party Advisory
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29 Vendor Advisory