Lucene search
+L

2 matches found

OSV
OSV
•added 2024/10/12 11:07 a.m.•23 views

OESA-2024-2214 zlog security update

zlog is a reliable, high-performance, thread safe, flexible, clear-model, pure C logging library. Security Fixes: Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlogrulenew.The size of recordname is MAXLENPATH1024 + 1 but filepath may have data upto MAXLENCFGLINEMAXLENPATH4 + 1. So a check w...

9.8CVSS8.6AI score0.01685EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/28 12:00 a.m.•9 views

PT-2024-1977

Name of the Vulnerable Software and Affected Versions zlog versions 1.1.0 through 1.2.17 Description The issue is related to a heap-based buffer overflow in the zlog library, specifically in the zlog rule new function. This occurs because the size of record name is limited to MAXLEN PATH1024 + 1,...

10CVSS8.7AI score0.01685EPSS
SaveExploits0References25
Rows per page
Query Builder