CVE-2024-1354

CVE-2024-1354 describes a command-injection vulnerability in GitHub Enterprise Server where an attacker with editor privileges in the Management Console could escalate to admin SSH access via the syslog-ng configuration. The issue requires access to the GitHub Enterprise Server instance and Manag...

PT-2024-17967 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.12 Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the...

GitHub: Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the syslog-ng configuration file. This vulnerability affected all versions of GitHub Enterprise Server...

CVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-7

CVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-7. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2023-3.0-0693

Updates of 'syslog-ng', 'runc' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0494

Updates of 'binutils', 'syslog-ng' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0093

Updates of 'python3', 'openvswitch', 'apache-tomcat', 'redis', 'syslog-ng' packages of Photon OS have been released...

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected...

GLSA-202305-09 : syslog-ng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202305-09 syslog-ng: Denial of Service - An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the...

syslog-ng: Denial of Service

Background syslog replacement with advanced filtering features. Description An integer overflow in the RFC3164 parser allows remote attackers to cause a denial of service via crafted syslog input that is mishandled by the tcp or network function. Impact Attackers with access to input syslogs over...

Denial Of Service (DoS)

syslog-ng is vulnerable to Denial Of Service DoS. The vulnerability exists due to the integer overflow in the RFC3164 parser in the library, which allows an attacker to cause an application crash through the syslog input that is mishandled by the TCP or network function...

Debian: Security Advisory (DSA-5369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5369-1 : syslog-ng - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5369 advisory. - An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that i...

[SECURITY] [DSA 5369-1] syslog-ng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5369-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 05, 2023 https://www.debian.org/security/faq -...

CVE-2022-38725 affecting package syslog-ng 3.23.1-3

CVE-2022-38725 affecting package syslog-ng 3.23.1-3. A patched version of the package is available...

Debian dla-3348 : syslog-ng - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3348 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3348-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3348-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3348-1 syslog-ng - security update

Bulletin has no description...

[SECURITY] [DLA 3348-1] syslog-ng security update

Debian LTS Advisory DLA-3348-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 01, 2023 https://wiki.debian.org/LTS Package : syslog-ng Version : 3.19.1-5+deb10u1 CVE ID : CVE-2022-38725 It was discovered that syslog-ng, a system logging daemon, had integer...

SUSE CVE-2007-6437

Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service crash via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference...