Threats Tagged 'cve-2026-19654'

CVE-2026-19654 is a vulnerability in the rsyslog daemon on Red Hat Enterprise Linux 10 involving the optional imptcp module. An unauthenticated remote attacker can cause rsyslogd to crash by sending a crafted input sequence during oversize-frame recovery, leading to an invalid internal message length. This results in a denial-of-service condition. There is no impact on confidentiality, integrity, privilege escalation, or code execution. The vulnerability only affects configurations where the imptcp module is explicitly loaded with a non-default framing.delimiter.regex mode and a TCP listener is accessible. Default configurations are not affected. Red Hat rates this issue as moderate severity for their products despite a higher upstream rating. Mitigations include removing the framing.delimiter.regex setting, disabling or unloading the imptcp listener if not needed, or restricting network access to trusted senders.