rsyslog versions before 8.2606.0 contain a stack-based buffer overflow in the mmpstrucdata output module. An unauthenticated network sender who can deliver a crafted RFC 5424 message to an affected rsyslog instance can cause rsyslogd to terminate, resulting in denial of service.