Skip to content
OpenAdvisories
High ALAS2-2026-3904 1 CVE

Important: rsyslog security update (Amazon Linux 2)

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-78002: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2 rsyslog 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-crypto 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-debuginfo 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-doc 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-elasticsearch 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-gnutls 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-gssapi 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-kafka 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-libdbi 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mmaudit 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mmjsonparse 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mmkubernetes 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mmnormalize 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mmsnmptrapd 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-mysql 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-pgsql 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-relp 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-snmp 0:8.24.0-57.amzn2.2.0.3
Amazon Linux · 2 rsyslog-udpspoof 0:8.24.0-57.amzn2.2.0.3

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-78002.html