CVE-2026-78002
CVE-2026-78002 · Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
CVSS 7.5 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 10
- Versions
- ≥ 0:8.2510.0-5.el10_2.2: Not affected (rpm)
No fix published
red hat enterprise linux 10.0 extended update support
- Versions
- ≥ 0:8.2412.0-1.el10_0.2: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:8.2102.0-15.el8_10.3: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 telecommunications update service
- Versions
- ≥ 0:8.2102.0-13.el8_8.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 update services for sap solutions
- Versions
- ≥ 0:8.2102.0-13.el8_8.1: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:8.2510.0-2.el9_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 update services for sap solutions
- Versions
- ≥ 0:8.2102.0-113.el9_2.3: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
- Versions
- ≥ 0:8.2412.0-1.el9_6.2: Not affected (rpm)
No fix published
red hat update infrastructure 5
- Versions
- ≥ 1790241900: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
rsyslog Debian:12
- Versions
- 8.2302.0-1
- 8.2302.0-1+deb12u1
- 8.2304.0-1
- 8.2306.0-1
- 8.2306.0-2
- 8.2308.0-1
- 8.2310.0-1
- 8.2310.0-2
- 8.2310.0-3
- 8.2310.0-4
- 8.2312.0-1
- 8.2312.0-2
- 8.2312.0-3
- 8.2402.0-1
- 8.2404.0-1
- 8.2404.0-2
- 8.2406.0-1
- 8.2408.0-1
- 8.2408.0-2
- 8.2410.0-1
- 8.2412.0-1
- 8.2412.0-2
- 8.2502.0-1
- 8.2502.0-2
- 8.2502.0-3
- 8.2502.0-4
- 8.2502.0-5
- 8.2502.0-6
- 8.2504.0-1
- 8.2506.0-1
- 8.2506.0-2
- 8.2506.0-3
- 8.2506.0-4
- 8.2506.0-6
- 8.2510.0-1
- 8.2510.0-2
- 8.2510.0-3
- 8.2510.0-4
- 8.2510.0-5
- 8.2512.0-1
- 8.2512.0-2
- 8.2512.0-3
- 8.2602.0-1
- 8.2604.0-1
- 8.2604.0-2
- 8.2604.0-3
- 8.2604.0-4
- 8.2606.0-1
- 8.2606.0-2
- 8.2606.0-3
- 8.2606.0-4
- 8.2608.0-1
- 8.2608.0-2
- 8.2608.0-3
- 8.2608.0-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rsyslog Debian:13
- Versions
- 8.2504.0-1
- 8.2504.0-1+deb13u1
- Affected ranges
- ECOSYSTEM: < 8.2504.0-1+deb13u2
Update to 8.2504.0-1+deb13u2
rsyslog Debian:14
- Versions
- 8.2504.0-1
- 8.2506.0-1
- 8.2506.0-2
- 8.2506.0-3
- 8.2506.0-4
- 8.2506.0-6
- 8.2510.0-1
- 8.2510.0-2
- 8.2510.0-3
- 8.2510.0-4
- 8.2510.0-5
- 8.2512.0-1
- 8.2512.0-2
- 8.2512.0-3
- 8.2602.0-1
- 8.2604.0-1
- 8.2604.0-2
- 8.2604.0-3
- 8.2604.0-4
- 8.2606.0-1
- 8.2606.0-2
- 8.2606.0-3
- 8.2606.0-4
- 8.2608.0-1
- 8.2608.0-2
- 8.2608.0-3
- Affected ranges
- ECOSYSTEM: < 8.2608.0-4
Update to 8.2608.0-4
rsyslog Ubuntu:Pro:16.04:LTS
- Versions
- 8.12.0-1ubuntu2
- 8.12.0-1ubuntu3
- 8.14.0-2ubuntu1
- 8.14.0-2ubuntu2
- 8.16.0-1ubuntu1
- 8.16.0-1ubuntu2
- 8.16.0-1ubuntu3
- 8.16.0-1ubuntu3.1
- 8.16.0-1ubuntu3.1+esm1
- 8.16.0-1ubuntu3.1+esm2
- Affected ranges
- ECOSYSTEM: < 8.16.0-1ubuntu3.1+esm3
Update to 8.16.0-1ubuntu3.1+esm3
rsyslog Ubuntu:Pro:18.04:LTS
- Versions
- 8.16.0-1ubuntu9
- 8.16.0-1ubuntu10
- 8.32.0-1ubuntu3
- 8.32.0-1ubuntu4
- 8.32.0-1ubuntu4.2
- Affected ranges
- ECOSYSTEM: < 8.32.0-1ubuntu4.2+esm1
Update to 8.32.0-1ubuntu4.2+esm1
rsyslog Ubuntu:Pro:20.04:LTS
- Versions
- 8.1901.0-1ubuntu4
- 8.2001.0-1ubuntu1
- 8.2001.0-1ubuntu1.1
- 8.2001.0-1ubuntu1.3
- Affected ranges
- ECOSYSTEM: < 8.2001.0-1ubuntu1.3+esm1
Update to 8.2001.0-1ubuntu1.3+esm1
rsyslog Ubuntu:22.04:LTS
- Versions
- 8.2102.0-2ubuntu2
- 8.2110.0-3ubuntu1
- 8.2110.0-3ubuntu2
- 8.2110.0-4ubuntu1
- 8.2112.0-2ubuntu2
- 8.2112.0-2ubuntu2.2
- 8.2112.0-2ubuntu2.4
- Affected ranges
- ECOSYSTEM: < 8.2112.0-2ubuntu2.5
Update to 8.2112.0-2ubuntu2.5
rsyslog Ubuntu:24.04:LTS
- Versions
- 8.2306.0-2ubuntu2
- 8.2312.0-3ubuntu1
- 8.2312.0-3ubuntu2
- 8.2312.0-3ubuntu3
- 8.2312.0-3ubuntu7
- 8.2312.0-3ubuntu8
- 8.2312.0-3ubuntu9
- 8.2312.0-3ubuntu9.1
- 8.2312.0-3ubuntu9.2
- 8.2312.0-3ubuntu9.3
- Affected ranges
- ECOSYSTEM: < 8.2312.0-3ubuntu9.4
Update to 8.2312.0-3ubuntu9.4
rsyslog Ubuntu:26.04:LTS
- Versions
- 8.2504.0-1ubuntu2
- 8.2512.0-1ubuntu2
- 8.2512.0-1ubuntu3
- 8.2512.0-1ubuntu4
- 8.2512.0-1ubuntu4.1
- Affected ranges
- ECOSYSTEM: < 8.2512.0-1ubuntu4.2
Update to 8.2512.0-1ubuntu4.2
Original sources
- https://access.redhat.com/errata/RHSA-2026:69540
- https://access.redhat.com/errata/RHSA-2026:69541
- https://access.redhat.com/errata/RHSA-2026:71603
- https://access.redhat.com/errata/RHSA-2026:80817
- https://access.redhat.com/errata/RHSA-2026:81321
- https://access.redhat.com/errata/RHSA-2026:84576
- https://access.redhat.com/errata/RHSA-2026:86124
- https://access.redhat.com/errata/RHSA-2026:87408
- https://access.redhat.com/security/cve/CVE-2026-78002
- https://bugzilla.redhat.com/show_bug.cgi?id=2521135
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3
- http://www.openwall.com/lists/oss-security/2026/08/29/1
- https://nvd.nist.gov/vuln/detail/CVE-2026-78002