Search for packages
| purl | pkg:deb/debian/syslog-ng@3.28.1-2%2Bdeb11u1 |
| Next non-vulnerable version | 3.38.1-5+deb12u1 |
| Latest non-vulnerable version | 3.38.1-5+deb12u1 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1xzy-xag3-5ybt
Aliases: CVE-2024-47619 |
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-d3hk-n3x4-dfb6 | A denial of service vulnerability was discovered in rsyslog related to syslog input over the network. |
CVE-2022-38725
|