https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T04:40:56.426902+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/alsa-2026:67583 ALSA-2026:67583 — Low: rsyslog security update 2026-09-29T04:40:56.514402+00:00

Affected: AlmaLinux:9: rsyslog, AlmaLinux:9: rsyslog-crypto, AlmaLinux:9: rsyslog-doc, AlmaLinux:9: rsyslog-elasticsearch, AlmaLinux:9: rsyslog-gnutls, AlmaLinux:9: rsyslog-gssapi, AlmaLinux:9: rsyslog-kafka, AlmaLinux:9: rsyslog-logrotate, AlmaLinux:9: rsyslog-mmaudit, AlmaLinux:9: rsyslog-mmfields and 11 more

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

Security Fix(es):

* rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://db.gcve.eu/vuln/fkie_cve-2026-19654 fkie_cve-2026-19654 2026-09-29T04:40:56.514517+00:00

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

 https://db.gcve.eu/vuln/msrc_cve-2026-19654 msrc_CVE-2026-19654 — Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote… 2026-09-29T04:40:56.514551+00:00 msrc_CVE-2026-19654 https://db.gcve.eu/vuln/oesa-2026-3504 OESA-2026-3504 — rsyslog security update 2026-09-29T04:40:56.514574+00:00

Affected: openEuler:22.03-LTS-SP4: rsyslog, openEuler:24.03-LTS-SP1: rsyslog, openEuler:24.03-LTS-SP3: rsyslog, openEuler:24.03-LTS-SP4: rsyslog, openEuler:20.03-LTS-SP4: rsyslog

RSYSLOG is the rocket-fast system for log processing.It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transform them, and output to the results to diverse destinations. Security Fix(es):

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.(CVE-2026-19654)

 https://db.gcve.eu/vuln/rhsa-2026:66405 RHSA-2026:66405 — Red Hat Security Advisory: rsyslog security update 2026-09-29T04:40:56.514613+00:00

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

 https://db.gcve.eu/vuln/rhsa-2026:67583 RHSA-2026:67583 — Red Hat Security Advisory: rsyslog security update 2026-09-29T04:40:56.514633+00:00

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

 https://db.gcve.eu/vuln/ubuntu-cve-2026-19654 UBUNTU-CVE-2026-19654 2026-09-29T04:40:56.514649+00:00

Affected: Ubuntu:14.04:LTS: rsyslog, Ubuntu:Pro:16.04:LTS: rsyslog, Ubuntu:Pro:18.04:LTS: rsyslog, Ubuntu:Pro:20.04:LTS: rsyslog, Ubuntu:22.04:LTS: rsyslog, Ubuntu:24.04:LTS: rsyslog, Ubuntu:26.04:LTS: rsyslog

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.