Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-19654 →

DEBIAN-CVE-2026-19654

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame r...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 rsyslog

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 rsyslog

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2504.0-1+deb13u1"}]}]

Debian:14 rsyslog

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2608.0-1"}]}]

Références

advisory security-tracker.debian.org