Every CVESearch/Get API key

SUSE-SU-2026:3398-1

Security update for rsyslog

No scoreFix available

SUSE-SU-2026:3398-1 is a vulnerability with no CVSS score yet in rsyslog, published July 29, 2026. No source lists public exploit code. Fixed in rsyslog 8.2406.0-150600.12.13.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
8.2406.0-150600.12.13.1rsyslog +1 more

Description

This update for rsyslog fixes the following issue

  • input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).

Affected packages

Affected packages
PackageAffectedFixed
rsyslog
SUSE:Linux Enterprise Server 15 SP6-LTSS
before 8.2406.0-150600.12.13.1
8.2406.0-150600.12.13.1
rsyslog
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
before 8.2406.0-150600.12.13.1
8.2406.0-150600.12.13.1

What each source reports

OSVNo score

Security update for rsyslog

This update for rsyslog fixes the following issue

  • input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).
Record
SUSE-SU-2026:3398-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open