There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A
    crafted input sequence during oversize-frame recovery can cause an invalid internal message length and
    terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has
    been identified. imtcp and the default imptcp framing modes are not affected. (CVE-2026-19654)

  - Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp
    module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with
    calloc(0, len) when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes that
    pointer to apr_base64_decode. An unauthenticated remote attacker can send an oversized encoded credential
    to an imhttp endpoint configured for Basic Authentication, causing decoded data to overwrite adjacent heap
    memory before credential validation. Deployments that do not install, load, and use imhttp with Basic
    Authentication are not affected. The demonstrated impact is a process crash that interrupts log
    collection, and code execution has not been demonstrated. This issue is fixed in version 8.2604.0.
    (CVE-2026-55556)

  - Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata
    plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in
    a fixed pVal[32 * 1024] stack buffer and calls parsePARAM_VALUE without supplying the destination size. A
    remote unauthenticated attacker whose crafted RFC5424 message reaches an action using mmpstrucdata can
    provide a structured-data parameter larger than that buffer when MaxMessageSize permits it, causing an
    attacker-controlled stack overwrite. Deployments that do not install and use the plugin, or whose
    effective message-size limit remains below the required threshold, are not affected by this issue. The
    demonstrated impact is a crash and interruption of log collection; code execution is not demonstrated.
    This issue is fixed in version 8.2606.0. (CVE-2026-61548)

  - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the
    RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises
    from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful
    exploitation can lead to a denial of service (DoS) for the affected system. (CVE-2026-78002)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Debian Linux - rsyslog - 无 Ubuntu Linux - [mmpstrucdata rsyslog 插件中基于堆栈的缓冲区溢出] （CVE-2026-93403）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Debian Linux - rsyslog - なし Ubuntu Linux - [mmpstrucdata rsyslog プラグインにおけるスタックベースのバッファオーバーフロー](CVE-2026-93403)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Debian Linux - rsyslog - 無 Ubuntu Linux - [mmpstrucdata rsyslog 外掛程式中的堆疊型緩衝區溢位] （CVE-2026-93403）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Debian Linux - rsyslog - None  Ubuntu Linux - [Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin]     (CVE-2026-93403)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
478598	Alpine: multiple rsyslog packages: security update to 8.2608.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/11/6	2026/11/6	high
478598	Alpine: multiple rsyslog packages: security update to 8.2608.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/11/6	2026/11/6	high
349506	Linux Distros 未修补的漏洞：CVE-2026-93403	Nessus	Misc.	2026/9/23	2026/9/24	high
349506	Linux Distros のパッチ未適用の脆弱性: CVE-2026-93403	Nessus	Misc.	2026/9/23	2026/9/24	high
349506	Linux Distros 未修補弱點：CVE-2026-93403	Nessus	Misc.	2026/9/23	2026/9/24	high
349506	Linux Distros Unpatched Vulnerability : CVE-2026-93403	Nessus	Misc.	2026/9/23	2026/9/24	high

检测

插件搜索

high

high

high

high

high

high