Known vulnerabilities in rsyslog

Software: rsyslog
Software CPE: cpe:2.3:a:rsyslog_com:rsyslog:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rsyslog rsyslog is affected by 16 known vulnerabilities: 3 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139164 - Improper input validation
CVE-2026-19654
CWE-20 Medium
No
No
8.2608.0 22.07.2026 SB2026072281
#VU138583 - Stack-based buffer overflow
CVE-2026-61548
CWE-121 Medium
No
No
8.2606.0 20.07.2026 SB20260720175
SB2026072478
SB2026080382
and 3 more
#VU135091 - Heap-based Buffer Overflow
CVE-2026-55556
CWE-122 Medium
No
No
8.2604.0 24.06.2026 SB2026062428
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903
CWE-122 High
No
No
8.2204.1 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU22772 - Out-of-bounds read
CVE-2019-17040
CWE-125 Medium
No
No
8.1910.0 14.11.2019 SB2019100722
SB2019102125
SB2019111535
and 1 more
#VU22771 - Memory corruption
CVE-2019-17042
CWE-119 High
No
No
8.1910.0 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU22770 - Memory corruption
CVE-2019-17041
CWE-119 High
No
No
8.1910.0 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU30619 - Missing release of memory after effective lifetime
CVE-2011-1488
CWE-401 Medium
No
No
5.7.6 14.11.2019 SB2019111444
#VU30620 - Missing release of memory after effective lifetime
CVE-2011-1489
CWE-401 Medium
No
No
5.7.6 14.11.2019 SB2019111444
#VU30621 - Missing release of memory after effective lifetime
CVE-2011-1490
CWE-401 Medium
No
No
5.7.6 14.11.2019 SB2019111444
#VU17698 - Improper input validation
CVE-2018-16881
CWE-20 Low
No
No
8.27 14.02.2019 SB2017051708
SB2019020810
SB2019080724
and 3 more
#VU32475 - Memory corruption
CVE-2014-3634
CWE-119 Medium
No
No
7.6.6 02.11.2014 SB2014110202
SB2014120519
SB2014101517
and 6 more
#VU32476 - Improper input validation
CVE-2014-3683
CWE-20 Medium
No
No
7.6.7 02.11.2014 SB2014110203
SB2014120520
SB2014101517
and 1 more
#VU42487 - Resource Management Errors
CVE-2013-4758
CWE-399 Medium
No
No
- 04.10.2013 SB2013100404
#VU43478 - Heap-based Buffer Overflow
CVE-2011-4623
CWE-122 Low
No
No
- 26.09.2012 SB2012092603
SB2012070604
SB2014122404
#VU32854 - Stack-based buffer overflow
CVE-2011-3200
CWE-121 Medium
Available
No
4.6.8 06.09.2011 SB2011090603
SB2011092105