Search for packages
| purl | pkg:deb/debian/syslog-ng@3.3.5-4 |
| Next non-vulnerable version | 3.38.1-5+deb12u1 |
| Latest non-vulnerable version | 3.38.1-5+deb12u1 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1xzy-xag3-5ybt
Aliases: CVE-2024-47619 |
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue. |
Affected by 0 other vulnerabilities. |
|
VCID-d3hk-n3x4-dfb6
Aliases: CVE-2022-38725 |
A denial of service vulnerability was discovered in rsyslog related to syslog input over the network. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1gf1-xw2a-dqgq | This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information. |
CVE-2011-1951
|