CVE-2026-61548

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-61548
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-61548.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-61548
Aliases
  • GHSA-8qmr-c66f-g368
Downstream
Related
Published
2026-09-18T16:54:28Z
Modified
2026-09-19T03:47:20Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data
Details

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal[32 * 1024] stack buffer and calls parsePARAM_VALUE without supplying the destination size. A remote unauthenticated attacker whose crafted RFC5424 message reaches an action using mmpstrucdata can provide a structured-data parameter larger than that buffer when MaxMessageSize permits it, causing an attacker-controlled stack overwrite. Deployments that do not install and use the plugin, or whose effective message-size limit remains below the required threshold, are not affected by this issue. The demonstrated impact is a crash and interruption of log collection; code execution is not demonstrated. This issue is fixed in version 8.2606.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-121"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61548.json"
}
References

Affected packages

Git / github.com/rsyslog/rsyslog

Affected ranges

Type
GIT
Repo
https://github.com/rsyslog/rsyslog
Events
Introduced
9b104f782c0dd9440db27305cd87fd68414fce16
Fixed
13d51f0c8da399a5778d52353d2b2f848fdd40e9
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "7.5.4"
        },
        {
            "fixed": "8.2606.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-61548.json"