CVE-2022-38725

The CVE-2022-38725 issue is an integer overflow in the RFC3164 parser of One Identity syslog-ng 3.0 through 3.37, leading to Denial of Service when processing crafted syslog input. Affected products also include syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0. Multiple connected s...

CVE-2024-47619

CVE-2024-47619 — syslog-ng TLS wildcard bug Affected product: syslog-ng (log daemon). Prior to version 4.8.2, the tls_wildcard_match() function can erroneously match on certificates like foo..bar and accept partial wildcards such as foo.a c.bar, which glib matches but should be considered invalid...

CVE-2011-1951

Balabit syslog-ng

CVE-2020-8019

CVE-2020-8019 is a local privilege escalation vulnerability in the packaging of syslog-ng across multiple SUSE products (Debuginfo 11-SP3/11-SP4, Legacy Software 12, POS 11-SP3, Server 11-SP4-LTSS, Server for SAP 12-SP1, openSUSE backports/leap 15.1). The root cause is a UNIX Symbolic Link (Symli...