The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade syslog-ng | Jul 30, 2024 | Jul 11, 2011 |
| Gentoo Linux | — | Upgrade net-libs/libsoup.Upgrade x11-apps/xrdb.Upgrade net-misc/vino.Upgrade sys-fs/lvm2.Upgrade dev-db/unixODBC.Upgrade net-libs/webkit-gtk.Upgrade dev-php/PEAR-PEAR.Upgrade gnome-base/gdm.Upgrade media-libs/fmod.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/rsync.Upgrade app-office/gnucash.Upgrade net-analyzer/sflowtool.Upgrade sys-apps/shadow.Upgrade dev-vcs/gitolite.Upgrade net-misc/mrouted.Upgrade app-admin/syslog-ng.Upgrade sys-cluster/resource-agents.Upgrade dev-libs/xmlsec.Upgrade app-misc/ca-certificates.Upgrade media-sound/lastfmplayer.Upgrade games-sports/racer-bin.Upgrade dev-util/qt-creator.Upgrade dev-util/oprofile.Upgrade media-libs/xine-lib. | Oct 30, 2017 | Jul 11, 2011 |
| Suse | — | Upgrade syslog-ng | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub