Heap Buffer Overflow Vulnerability in Rsyslog Affects Unauthenticated Systems
CVE-2026-78002
7.5HIGH
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 27 August 2026
What is CVE-2026-78002?
A flaw in Rsyslog allows an unauthenticated remote attacker to exploit a heap buffer overflow in the RainerScript replace() function. By sending specially crafted syslog messages, an attacker can trigger this vulnerability, resulting from incorrect buffer size calculations during string replacements. This can lead to memory corruption, potentially causing a denial of service effect on the targeted system.
Affected Version(s)
Red Hat Enterprise Linux 10 0:8.2510.0-5.el10_2.2
Red Hat Enterprise Linux 9 0:8.2510.0-2.el9_8.2
Red Hat Update Infrastructure 5 1790241900