AZL-95958

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95958.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-95958

Upstream

CVE-2026-19654

Published

2026-08-12T21:17:38Z

Modified

2026-09-27T05:34:32Z

Summary

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6

Details

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-19654

Affected packages

Azure Linux:3 / rsyslog

Package

Name: rsyslog
Purl: pkg:rpm/azure-linux/rsyslog

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8.2308.0-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95958.json"