Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-78002: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | rsyslog | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-crypto | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-crypto-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-debugsource | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-doc | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-elasticsearch | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-elasticsearch-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-logrotate | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmaudit | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmaudit-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmfields | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmfields-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmjsonparse | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmjsonparse-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmkubernetes | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmkubernetes-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmnormalize | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmnormalize-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmtaghostname | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-mmtaghostname-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-openssl | 0:8.2204.0-3.amzn2023.0.6 |
| Amazon Linux · 2023 | rsyslog-openssl-debuginfo | 0:8.2204.0-3.amzn2023.0.6 |
Vulnerabilities 1
-
High 7.5
Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation durin…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-78002.html