Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1951
HistoryJul 11, 2011 - 12:00 a.m.

CVE-2011-1951

2011-07-1100:00:00
ubuntu.com
ubuntu.com
8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is
set and when using PCRE 8.12 and possibly other versions, allows remote
attackers to cause a denial of service (memory consumption) via a message
that does not match a regular expression.

Notes

Author Note
sbeattie may not affect releases where libpcre3 is < 8.12

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%