CVE-2026-78002 — Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

Description (CNA)

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.

Affected (CNA)

Vendor / product	Versions
Red Hat / Red Hat Enterprise Linux 10	unaffected 0:8.2510.0-5.el10_2.2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support	unaffected 0:8.2412.0-1.el10_0.2 before *
Red Hat / Red Hat Enterprise Linux 8	unaffected 0:8.2102.0-15.el8_10.3 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:8.2102.0-13.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	unaffected 0:8.2102.0-13.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9	unaffected 0:8.2510.0-2.el9_8.2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	unaffected 0:8.2102.0-113.el9_2.3 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:8.2412.0-1.el9_6.2 before *
Red Hat / Red Hat Update Infrastructure 5	unaffected 1790241900 before *
Red Hat / Red Hat Enterprise Linux 6	unaffected
Red Hat / Red Hat Enterprise Linux 6	unaffected
Red Hat / Red Hat Enterprise Linux 7	affected

CWE

CWE-131

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/08/29/1