263 matches found
CVE-2022-38725
CVE-2022-38725 CVE-2022-38725는 3.38.1 이전 버전의 syslog-ng에서 발생하는 인증되지 않은 서비스 거부Denial of Service 취약점입니다. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 재현 단계 1. 취약한 docker 이미지를 가져옵니다: docker pull...
Astra Linux – Vulnerability in syslog-ng
An integer overflow in the RFC3164 parser in One Identity syslog-ng versions 3.0 through 3.37 allows remote attackers to cause a Denial of Service by manipulating crafted syslog inputs, which are mishandled by the TCP or network functions. Syslog-ng Premium Edition 7.0.30 and Syslog-ng Store Box...
SUSE CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879
A flaw was found in syslog-ng. An attacker on an adjacent network can exploit a missing sanitization call in the afsqlddrunquery function, leading to a SQL injection vulnerability. This vulnerability, when the SQL driver is manually configured, can result in a denial of service and allow for...
CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879
CVE-2026-39879 affects syslog-ng before version 4.12, where a missing sanitization in afsql_dd_run_query can allow SQL injection from an untrusted source when using the SQL destination driver (not enabled by default). The issue lies in the afsql.c component (afsql_dd_run_query) and is exploitable...
EUVD-2026-46031
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
PT-2026-61651
Name of the Vulnerable Software and Affected Versions syslog-ng versions prior to 4.12 syslog-ng Premium Edition versions prior to 8.2 syslog-ng Store Box versions prior to 7.8 Description A SQL injection flaw exists when the SQL driver is manually configured, allowing an untrusted source to...
CVE-2026-39879: Improper Neutralization of Escape, Meta, or Control Sequences
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
Linux Distros Unpatched Vulnerability : CVE-2026-39879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the...
SolarWinds Kiwi Syslog NG < 1.3.1 Sensitive Information Disclosure (CVE-2024-45718)
According to its self-reported version, the SolarWinds Kiwi Syslog NG installation on the remote host is version 1.3 or earlier. It is, therefore, affected by a cleartext storage of sensitive information vulnerability. Sensitive data could be exposed to non-privileged users in a configuration fil...
Siemens SCALANCE and RUGGEDCOM Improper Certificate Validation (CVE-2024-47619)
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also possible to pass partial wildcards such as foo.ac.bar which glib matches but should be avoided / invalidated. This issue could have an...
EUVD-2011-1945
Malware in sbrugna...
EUVD-2007-6403
Malware in sbrugna...
EUVD-2002-1184
Malware in sbrugna...