Skip to content
OpenAdvisories

Package · Ubuntu

syslog-ng

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.1
    CVE-2026-39879

    SQL injection in syslog-ng SQL destionation driver

    Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This…

    syslog-ng syslog-ng syslog-ng syslog-ng Debian Ubuntu
  • High 7.5
    CVE-2024-47619

    tranport: TLS host name wildcard matching too lax

    syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be a…

    syslog-ng syslog-ng syslog-ng syslog-ng Debian Ubuntu
  • High 7.5
    CVE-2022-38725 Public exploit

    An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a…

    syslog-ng syslog-ng syslog-ng Debian Ubuntu Alpine