Skip to content
OpenAdvisories
High USN-8598-1 1 CVE

rsyslog vulnerabilities

Published Jul 23, 2026 · Updated Sep 21, 2026

Ecosystem: Ubuntu

Summary

It was discovered that rsyslog incorrectly handled regex-based TCP framing
in the imptcp module. A remote attacker could possibly use this issue to
cause rsyslog to crash, resulting in a denial of service.

It was discovered that rsyslog incorrectly handled oversized RFC5424
structured data in the mmpstrucdata module. A remote attacker could
possibly use this issue to cause rsyslog to crash, resulting in a denial of
service. (CVE-2026-61548)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS rsyslog 8.2112.0-2ubuntu2.4
Ubuntu · 24.04 LTS 24.04:LTS rsyslog 8.2312.0-3ubuntu9.3
Ubuntu · 26.04 LTS 26.04:LTS rsyslog 8.2512.0-1ubuntu4.1

Vulnerabilities 1

  • High 8.1
    CVE-2026-61548

    Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data

    Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal[32 * 1024] stack buffer and calls p…

    rsyslog rsyslog rsyslog rsyslog Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-61548