CVE-2026-19654

Katalog CVE

CVSS 7.5 · High EPSS 0,48%

Kerentanan Out-of-bounds Read pada rsyslog, redhat enterprise linux. Skor CVSS 3.1 7.5 (High) menurut redhat.com.

Deskripsi (NVD)

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

Rincian

Terbit di NVD

12 Agustus 2026

Terakhir diubah

12 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29 advisory vendor
• https://access.redhat.com/security/cve/CVE-2026-19654 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2502868 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:66405
• https://access.redhat.com/errata/RHSA-2026:67583
• https://access.redhat.com/errata/RHSA-2026:67584
• https://access.redhat.com/errata/RHSA-2026:71603
• https://access.redhat.com/errata/RHSA-2026:80817