SUSE-SU-2026:3442-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414...

Exploit for Classic Buffer Overflow in Rsyslog

CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa...

PT-2026-66659

These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11407-1 rsyslog-8.2606.0-1.1 on GA media

These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-61548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a stack-based buffer overflow inside the mmpstrucdata module of rsyslog while it parses RFC 5424 structured data. CVE-2026-61548...

USN-8598-1: rsyslog vulnerabilities

It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled oversized RFC5424 structured data in the...

USN-8598-1 rsyslog vulnerabilities

It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled oversized RFC5424 structured data in the...

PT-2026-71338

Name of the Vulnerable Software and Affected Versions rsyslogd affected versions not specified Description An unauthenticated remote peer can cause rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can result in an invalid...

CVE-2026-61548

rsyslog mmpstrucdata stack overflow...

PT-2026-64216

Name of the Vulnerable Software and Affected Versions rsyslog affected versions not specified Description Two issues were identified in rsyslog. First, the imptcp module incorrectly handles regex-based TCP framing, which could allow a remote attacker to cause the service to crash. Second, a stack...

CVE-2026-55556

heap overflow in the optional rsyslog imhttp input module...

Linux Distros Unpatched Vulnerability : CVE-2026-55556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - Unknown description CVE-2026-55556 Note that Nessus relies on the presence of the package as reported by the vendor...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cloud-init (SUSE-SU-2026:1980-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1980-1 advisory. - Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 - Update to version 25.1.1...

Security update for cloud-init

This update for cloud-init fixes the following issues: Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 Update to version 25.1.1 bsc1239715, jscPED-8680, bsc1228414, bsc1237764 Make sure a directory exists, if not create it, before writing in that location bsc1236720 rsyslog...

SUSE-SU-2026:1980-1 Security update for cloud-init

This update for cloud-init fixes the following issues: - Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 - Update to version 25.1.1 bsc1239715, jscPED-8680, bsc1228414, bsc1237764 - Make sure a directory exists, if not create it, before writing in that location bsc1236720 -...

AZL-79434 CVE-2026-27601 affecting package rsyslog 8.2204.1-4

Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service DoS attack by triggering a stack overflow...

MiracleLinux 8 : rsyslog-8.2102.0-7.el8.1 (AXSA:2022-3666:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3666:04 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

MiracleLinux 9 : rsyslog-8.2102.0-101.el9.1 (AXSA:2022-3974:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3974:05 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

MiracleLinux 7 : rsyslog-8.24.0-57.el7.3 (AXSA:2022-3197:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3197:02 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

MiracleLinux 7 : rsyslog-8.24.0-52.el7 (AXSA:2020-4536:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4536:02 advisory. rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c CVE-2019-17041 rsyslog: heap-based overflow in...