← CVE Intelligence

CVE-2026-19654

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd PUBLISHED

Description (CNA)

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:8.2510.0-5.el10_2.1 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:8.2412.0-1.el10_0.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.2102.0-15.el8_10.3 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:8.2102.0-13.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:8.2102.0-13.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:8.2510.0-2.el9_8.1 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:8.2102.0-113.el9_2.3 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:8.2310.0-4.el9_4.1 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:8.2412.0-1.el9_6.2 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1790241900 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.