VDB

CVE-2026-78002

CVE-2026-78002 PUBLISHED CVSS 7.5 HIGH

Reported by redhat · Published August 27, 2026

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 100:8.2510.0-5.el10_2.2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:8.2412.0-1.el10_0.2
Red HatRed Hat Enterprise Linux 80:8.2102.0-15.el8_10.3
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:8.2102.0-13.el8_8.1
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:8.2102.0-13.el8_8.1
Red HatRed Hat Enterprise Linux 90:8.2510.0-2.el9_8.2
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:8.2102.0-113.el9_2.3
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:8.2310.0-4.el9_4.2
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:8.2412.0-1.el9_6.2
Red HatRed Hat Update Infrastructure 51790241900
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
alpinersyslog0, 0, 0
Red HatRed Hat Update Infrastructure 51790241900, 1790241900, 1790241900
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:8.2412.0-1.el9_6.2
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 80:8.2102.0-15.el8_10.3
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:8.2102.0-13.el8_8.1

…and 8 more

Timeline

  • Aug 27, 2026 Coalition ESS Score
  • Aug 27, 2026 CVE Published
  • Aug 28, 2026 EPSS Score
  • Aug 30, 2026 EPSS Score
  • Sep 2, 2026 Security Advisory
  • Sep 3, 2026 EPSS Score
  • Sep 5, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 12, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score
  • Sep 18, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›