rsyslog msgstructdata stack overflow (CVE-2026-61548)

Key Vulnerability Information Summary Vulnerability Overview Vulnerability Name: The plugin is subject to a stack-based buffer overflow when processing oversized RFC5424 structured data parameters. CVE ID: CVE-2026-41548 Severity: High (CVSS 3.1 score 8.1/10) Vulnerability Type: Stack-based buffer overflow Trigger Condition: When is configured high enough to accept oversized structured data parameter values, a malformed RFC5424 message can overflow the stack buffer. Affected Scope Affected Versions: 7.5.4 (2013) and later Affected Configurations (all of the following conditions must be met simultaneously): - The optional plugin is installed; - The plugin is explicitly loaded and used in the rsyslog configuration; - Attacker-controllable RFC5424 structured data can reach the plugin; - is configured high enough to allow structured data parameter values exceeding the historically fixed 32 KiB buffer size. Note: Downstream packaging varies; some distributions may package separately, bundle it into a larger rsyslog package, or not package it at all. Users and distributions should verify whether the plugin is installed and configured. Fix Details Fixed Version: 8.2606.0 Fix Description: In affected versions, allocates a 32,768-byte stack buffer ( ) and passes it to , which writes to the buffer without a size check, being limited only by the structured data length. This issue is resolved in the fixed version 8.2606.0. POC / Exploit Code The page does not include a complete POC or exploit code; it only displays a one-line source code snippet in the “Details” section:

Goal Reached Thanks to every supporter — we hit 100%!

rsyslog msgstructdata stack overflow (CVE-2026-61548)

More from this source