Known vulnerabilities in rsyslog (Ubuntu package)

Known vulnerabilities in rsyslog (Ubuntu package)

Vendor: Canonical Ltd.

Software: rsyslog (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:rsyslog_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 6

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU146002 - Heap-based Buffer Overflow CVE-2026-78002	CWE-122	Medium	No	No	8.16.0-1ubuntu3.1+esm3, 8.32.0-1ubuntu4.2+esm1, 8.2001.0-1ubuntu1.3+esm1, 8.2112.0-2ubuntu2.5, 8.2312.0-3ubuntu9.4, 8.2512.0-1ubuntu4.2	27.08.2026	SB20260827146 SB2026091347 SB2026091348 and 10 more
#VU138583 - Stack-based buffer overflow CVE-2026-61548	CWE-121	Medium	No	No	8.2112.0-2ubuntu2.4, 8.2312.0-3ubuntu9.3, 8.2512.0-1ubuntu4.1	20.07.2026	SB20260720175 SB2026072478 SB2026080382 and 4 more
#VU62830 - Heap-based Buffer Overflow CVE-2022-24903	CWE-122	High	No	No	8.16.01ubuntu3.1+esm2, 8.32.0-1ubuntu4.2, 8.2001.0-1ubuntu1.3, 8.2102.0-2ubuntu2.2, 8.2112.0-2ubuntu2.2	05.05.2022	SB2022050524 SB2022050920 SB2022052425 and 45 more
#VU22771 - Memory corruption CVE-2019-17042	CWE-119	High	No	No	8.16.01ubuntu3.1+esm1	14.11.2019	SB2019111416 SB2019111417 SB2019100722 and 9 more
#VU22770 - Memory corruption CVE-2019-17041	CWE-119	High	No	No	8.16.01ubuntu3.1+esm1	14.11.2019	SB2019111416 SB2019111417 SB2019100722 and 9 more
#VU17698 - Improper input validation CVE-2018-16881	CWE-20	Low	No	No	8.16.01ubuntu3.1+esm1	14.02.2019	SB2017051708 SB2019020810 SB2019080724 and 3 more