PT-2026-64216 · Rsyslog · Rsyslog

CVE-2026-61548 · Published 2026-07-20 · Updated 2026-07-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions rsyslog (affected versions not specified)

Description Two issues were identified in rsyslog. First, the imptcp module incorrectly handles regex-based TCP framing, which could allow a remote attacker to cause the service to crash. Second, a stack buffer overflow exists in the mmpstrucdata module when processing oversized RFC5424 structured data, which could also be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-61548

USN-8598-1

Affected Products

Rsyslog

References · 6

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-61548 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-61548 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8598-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-61548 · Security Note
• https://ubuntu.com/security/notices/USN-8598-1 · Vendor Advisory
• https://github.com/rsyslog/rsyslog/security/advisories/GHSA-8qmr-c66f-g368 · Note