Homepage

Out-of-bounds Read The advisory has been revoked - it doesn't affect any version of package rsyslog7-pgsql  (opens in a new tab)

Threat Intelligence

EPSS
0.77% (56th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS6-RSYSLOG7PGSQL-18756587
  • published13 Aug 2026
  • disclosed22 Jul 2026
Report a new vulnerability Found a mistake?

Introduced: 22 Jul 2026

CVE-2026-19654  (opens in a new tab)
CWE-125  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rsyslog7-pgsql package and not the rsyslog7-pgsql package as distributed by Centos.

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.