Homepage

Incorrect Calculation of Buffer Size The advisory has been revoked - it doesn't affect any version of package rsyslog-gssapi  (opens in a new tab)

Threat Intelligence

EPSS
0.98% (62nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-RSYSLOGGSSAPI-19398171
  • published28 Aug 2026
  • disclosed26 Aug 2026
Report a new vulnerability Found a mistake?

Introduced: 26 Aug 2026

CVE-2026-78002  (opens in a new tab)
CWE-131  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rsyslog-gssapi package and not the rsyslog-gssapi package as distributed by RHEL.

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace() function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.