OESA-2024-2214 zlog security update

zlog is a reliable, high-performance, thread safe, flexible, clear-model, pure C logging library. Security Fixes: Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlogrulenew.The size of recordname is MAXLENPATH1024 + 1 but filepath may have data upto MAXLENCFGLINEMAXLENPATH4 + 1. So a check w...

PT-2024-1977 · Zlog · Zlog

Name of the Vulnerable Software and Affected Versions: zlog versions 1.1.0 through 1.2.17 Description: The issue is related to a heap-based buffer overflow in the zlog library, specifically in the zlog rule new function. This occurs because the size of record name is limited to MAXLEN PATH1024 + ...